netzbegruenung / keycloak-mfa-plugins

Keycloak Authentication Provider implementation to get a 2nd-factor authentication with a OTP/code/token send via SMS
Apache License 2.0
42 stars 9 forks source link

Update Number required action fails #43

Closed svenseeberg closed 1 year ago

svenseeberg commented 1 year ago

With versions 0.2.1 and 0.2.2 the update phone number required action fails after entering the phone number. No code is being sent and a mail notification about a failed login attempt is being sent to the user.

melegiul commented 1 year ago

Error message from the logs:

java.util.regex.PatternSyntaxException: Dangling meta character '+' near index 0
+
^
    at java.base/java.util.regex.Pattern.error(Pattern.java:2027)
    at java.base/java.util.regex.Pattern.sequence(Pattern.java:2202)
    at java.base/java.util.regex.Pattern.expr(Pattern.java:2068)
    at java.base/java.util.regex.Pattern.compile(Pattern.java:1782)
    at java.base/java.util.regex.Pattern.<init>(Pattern.java:1428)
    at java.base/java.util.regex.Pattern.compile(Pattern.java:1068)
    at java.base/java.lang.String.replaceFirst(String.java:2081)
    at netzbegruenung.keycloak.authenticator.gateway.ApiSmsService.clean_phone_number(ApiSmsService.java:143)