nexcess / magento-sentry-two-factor-authentication

28 stars 18 forks source link

Duo TFA Form Refreshes Itself #23

Open jimbo11883 opened 7 years ago

jimbo11883 commented 7 years ago

When try to login, the TFA form iframe keeps on refreshing itself. This seems to only happen on my production site, and not on my dev site. I'm still trying to find the underlying problem.

miguelbalparda commented 7 years ago

Which version of the module are you using?

jimbo11883 commented 7 years ago

Version 1.0.4

miguelbalparda commented 7 years ago

Can you try the version from the devel branch?

jimbo11883 commented 7 years ago

It seems in the javascript theres the following:

` D.receiveMessage(function(msg) { var sig_response = msg.data + ':' + Duo._app_sig; var input = D('').attr('name', Duo._post_argument).val(sig_response);

        var form = D('#duo_form');
        if (!form.length) {
            form = D('<form>');
            form.insertAfter(iframe);
        }

        form.attr('method', 'POST');
        form.attr('action', Duo._post_action);
        form.append(input);
        form.append('<input type="hidden" name="form_key" value="'+ Duo._mage_form_key +'" />');
        form.submit();
    }, 'https://' + Duo._host);

`

I am receiving the following message, before the form is submitted:

"{"width":468,"height":330,"startTime":1489069883476,"adId":"1489069883476-4830728228117","html5":true,"adSizeMeta":null,"winClickTag":null,"element":{"tagName":"BODY","width":468,"height":330,"left":0,"top":0,"adId":"1489069883476-4830728228117"},"context":{"tagName":"HTML","width":468,"height":330,"left":0,"top":0,"children":[{"tagName":"BODY","width":468,"height":330,"left":0,"top":0,"children":[{"tagName":"DIV","width":468,"height":330,"left":0,"top":0,"children":[{"tagName":"DIV","width":466,"height":64,"left":1,"top":1,"children":[{"tagName":"DIV","width":466,"height":64,"left":1,"top":1,"children":[{"tagName":"DIV","width":434,"height":54,"left":17,"top":17,"children":[{"tagName":"A","width":48,"height":17,"left":17,"top":52,"children":[{"tagName":"IMG","width":48,"height":48,"left":17,"top":17,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/logo?sid=ZGZmNjA5M2IyYzg0NDY3OTkzMGE4MDBmY2JlMjUwYmQ%3D%7C208.49.182.106%7C1489069876%7Ce8a9071a81495ce0f3a6e23329d7966aaa5f57c9"}],"url":"https://api-6e303d79.duosecurity.com/frame/prompt?sid=ZGZmNjA5M2IyYzg0NDY3OTkzMGE4MDBmY2JlMjUwYmQ%3D%7C208.49.182.106%7C1489069876%7Ce8a9071a81495ce0f3a6e23329d7966aaa5f57c9"}]},{"tagName":"DIV","width":0,"height":0,"left":451,"top":71,"children":[{"tagName":"DIV","width":0,"height":0,"left":0,"top":0,"children":[{"tagName":"NAV","width":0,"height":0,"left":0,"top":0,"children":[{"tagName":"A","width":0,"height":0,"left":0,"top":0,"children":[],"class":"help-nav","url":"https://guide.duo.com/prompt"},{"tagName":"A","width":0,"height":0,"left":0,"top":0,"children":[],"class":"need-help","url":"https://api-6e303d79.duosecurity.com/frame/prompt?sid=ZGZmNjA5M2IyYzg0NDY3OTkzMGE4MDBmY2JlMjUwYmQ%3D%7C208.49.182.106%7C1489069876%7Ce8a9071a81495ce0f3a6e23329d7966aaa5f57c9#"}]},{"tagName":"DIV","width":0,"height":0,"left":0,"top":0,"children":[{"tagName":"A","width":0,"height":0,"left":0,"top":0,"children":[],"class":"branding-link","url":"https://duo.com/"}]}],"class":"help-links"}],"class":"help-sidebar"},{"tagName":"DIV","width":180,"height":330,"left":468,"top":0,"children":[{"tagName":"DIV","width":177,"height":61,"left":471,"top":12,"children":[{"tagName":"NAV","width":157,"height":41,"left":481,"top":22,"children":[{"tagName":"A","width":157,"height":21,"left":481,"top":22,"children":[],"class":"help-nav","url":"https://guide.duo.com/prompt"},{"tagName":"A","width":157,"height":20,"left":481,"top":43,"children":[],"class":"need-help","url":"https://api-6e303d79.duosecurity.com/frame/prompt?sid=ZGZmNjA5M2IyYzg0NDY3OTkzMGE4MDBmY2JlMjUwYmQ%3D%7C208.49.182.106%7C1489069876%7Ce8a9071a81495ce0f3a6e23329d7966aaa5f57c9#"}]},{"tagName":"DIV","width":157,"height":0,"left":481,"top":63,"children":[{"tagName":"A","width":140,"height":20,"left":481,"top":294,"children":[],"class":"branding-link","url":"https://duo.com/"}]}],"class":"help-links"}],"class":"help-overlay offscreen"}],"class":"base-navigation"}],"class":"base-navigation"}],"class":"base-wrapper "},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/jed/jed.js?v=3b969"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/jquery/jquery-legacy.min.js?v=65126"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/he/he.min.js?v=80d03"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/js/lib/jquery-postmessage.min.js?v=15c30"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/lodash/lodash.min.js?v=b3453"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/backbone/backbone-min.js?v=9cfbc"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/js/gettext.js?v=2ffec"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/js/page/v3/base.js?v=5c6af"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/validator/validator.min.js?v=74345"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"id":"browser_exceptions","url":"https://api-6e303d79.duosecurity.com/frame/static/shared/js/errors.js?v=c31d2"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/js/page/v3/frame.js?v=37e3a"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/u2f/u2f…ght":330,"left":0,"top":0,"children":[{"tagName":"DIV","width":466,"height":64,"left":1,"top":1,"children":[{"tagName":"DIV","width":466,"height":64,"left":1,"top":1,"children":[{"tagName":"DIV","width":434,"height":54,"left":17,"top":17,"children":[{"tagName":"A","width":48,"height":17,"left":17,"top":52,"children":[{"tagName":"IMG","width":48,"height":48,"left":17,"top":17,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/logo?sid=ZGZmNjA5M2IyYzg0NDY3OTkzMGE4MDBmY2JlMjUwYmQ%3D%7C208.49.182.106%7C1489069876%7Ce8a9071a81495ce0f3a6e23329d7966aaa5f57c9"}],"url":"https://api-6e303d79.duosecurity.com/frame/prompt?sid=ZGZmNjA5M2IyYzg0NDY3OTkzMGE4MDBmY2JlMjUwYmQ%3D%7C208.49.182.106%7C1489069876%7Ce8a9071a81495ce0f3a6e23329d7966aaa5f57c9"}]},{"tagName":"DIV","width":0,"height":0,"left":451,"top":71,"children":[{"tagName":"DIV","width":0,"height":0,"left":0,"top":0,"children":[{"tagName":"NAV","width":0,"height":0,"left":0,"top":0,"children":[{"tagName":"A","width":0,"height":0,"left":0,"top":0,"children":[],"class":"help-nav","url":"https://guide.duo.com/prompt"},{"tagName":"A","width":0,"height":0,"left":0,"top":0,"children":[],"class":"need-help","url":"https://api-6e303d79.duosecurity.com/frame/prompt?sid=ZGZmNjA5M2IyYzg0NDY3OTkzMGE4MDBmY2JlMjUwYmQ%3D%7C208.49.182.106%7C1489069876%7Ce8a9071a81495ce0f3a6e23329d7966aaa5f57c9#"}]},{"tagName":"DIV","width":0,"height":0,"left":0,"top":0,"children":[{"tagName":"A","width":0,"height":0,"left":0,"top":0,"children":[],"class":"branding-link","url":"https://duo.com/"}]}],"class":"help-links"}],"class":"help-sidebar"},{"tagName":"DIV","width":180,"height":330,"left":468,"top":0,"children":[{"tagName":"DIV","width":177,"height":61,"left":471,"top":12,"children":[{"tagName":"NAV","width":157,"height":41,"left":481,"top":22,"children":[{"tagName":"A","width":157,"height":21,"left":481,"top":22,"children":[],"class":"help-nav","url":"https://guide.duo.com/prompt"},{"tagName":"A","width":157,"height":20,"left":481,"top":43,"children":[],"class":"need-help","url":"https://api-6e303d79.duosecurity.com/frame/prompt?sid=ZGZmNjA5M2IyYzg0NDY3OTkzMGE4MDBmY2JlMjUwYmQ%3D%7C208.49.182.106%7C1489069876%7Ce8a9071a81495ce0f3a6e23329d7966aaa5f57c9#"}]},{"tagName":"DIV","width":157,"height":0,"left":481,"top":63,"children":[{"tagName":"A","width":140,"height":20,"left":481,"top":294,"children":[],"class":"branding-link","url":"https://duo.com/"}]}],"class":"help-links"}],"class":"help-overlay offscreen"}],"class":"base-navigation"}],"class":"base-navigation"}],"class":"base-wrapper "},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/jed/jed.js?v=3b969"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/jquery/jquery-legacy.min.js?v=65126"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/he/he.min.js?v=80d03"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/js/lib/jquery-postmessage.min.js?v=15c30"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/lodash/lodash.min.js?v=b3453"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/backbone/backbone-min.js?v=9cfbc"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/js/gettext.js?v=2ffec"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/js/page/v3/base.js?v=5c6af"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/validator/validator.min.js?v=74345"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"id":"browser_exceptions","url":"https://api-6e303d79.duosecurity.com/frame/static/shared/js/errors.js?v=c31d2"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/js/page/v3/frame.js?v=37e3a"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/shared/lib/u2f/u2f.min.js?v=dd1cd"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/js/lib/jquery.tipsy.js?v=cb2d5"},{"tagName":"SCRIPT","width":0,"height":0,"left":0,"top":0,"children":[],"url":"https://api-6e303d79.duosecurity.com/frame/static/js/page/v3/prompt.js?v=73f91"}],"adId":"1489069883476-4830728228117"}]},"postMessageId":"1484952787-11883-24071-12354-1549"}"

It seems to only be happening in Google Chrome.

miguelbalparda commented 7 years ago

Is this from the devel version or still using the master branch?

jimbo11883 commented 7 years ago

Still master branch. I am prepping to use devel now.

jimbo11883 commented 7 years ago

The issue still exists with the devel version.