simpleidserver / SimpleIdServer

OpenID, OAuth 2.0, SCIM2.0, UMA2.0, FAPI, CIBA & OPENBANKING Framework for ASP.NET Core
https://simpleidserver.com/
Apache License 2.0
682 stars 90 forks source link

Find the problem #729

Closed qq1176914912 closed 2 months ago

qq1176914912 commented 2 months ago

After I set Default acr methods to webauthn for the client, no prompt is displayed when I log in to the client using webauthn if webauthn is not bound to the current account. Should I inform the user that webauthn is not bound? image https://github.com/simpleidserver/SimpleIdServer/assets/79817742/eb90c0ea-f089-4f8e-87cc-f68375d39c70

qq1176914912 commented 2 months ago

On the Authentications page, in the filter bar, if you click the last fork directly, the entire page will jam: https://github.com/simpleidserver/SimpleIdServer/assets/79817742/662cc962-3484-4ce1-8cb7-ace77ace6288 5002 Error content: image

qq1176914912 commented 2 months ago

If you access scope on the Add client scope page, an error message "unknown scope xxx" is displayed. https://github.com/simpleidserver/SimpleIdServer/assets/79817742/53bd0360-bad8-4dee-a778-c208a7d034a6

qq1176914912 commented 2 months ago

When I create "credential" for the user, select "OTP" and then "HTOP" : image Then click "Show data" to show the QR code, I use the mobile phone software "Authenticator" to scan the code image IMG_2841(20240412-162346) Then set Default acr methods to otp for the client: image Then log in again, enter The user name and the verification code in the "Authenticator" software, click to log in, the display "The OTP is not valid". image I test "TOTP" is no problem, can log in normally, only "HOTP" can not log in normally.

simpleidserver commented 2 months ago

Hello,

The following issues have been fixed in the master branch:

Note that the authenticator application from Microsoft only supports TOTP codes and not HOTP :)