What is the expected behavior after introducing use just 2FA for login ?

ramosbugs / openidconnect-rs

OpenID Connect Library for Rust

MIT License

426 stars 103 forks source link

What is the expected behavior after introducing use just 2FA for login ? #187

Open Mishco opened 2 weeks ago

Mishco commented 2 weeks ago

We are introducing oidc 2FA (only as a single option instead of multiple options for login). What should be the expected behavior? Is it possible that the user may get an error such as:

{ "error" : "Internal server error: "Unauthorized (CSRF)" " }

When using the normal login option (not 2fa)? With 2FA there is no issue, login works well.

ramosbugs commented 21 hours ago

I'm not sure what this issue is asking. That looks like an error message being returned by the identity provider, so I'd suggest consulting their documentation or reaching out to them.