Page MenuHomePhabricator

Fix a double-prompt for MFA when recovering a password account
ClosedPublic

Authored by epriestley on Dec 18 2018, 8:04 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Jun 19, 8:27 PM
Unknown Object (File)
Wed, Jun 18, 12:01 AM
Unknown Object (File)
Jun 2 2025, 2:15 PM
Unknown Object (File)
May 6 2025, 4:37 PM
Unknown Object (File)
May 4 2025, 1:54 AM
Unknown Object (File)
Apr 17 2025, 3:33 PM
Unknown Object (File)
Apr 17 2025, 3:33 PM
Unknown Object (File)
Apr 17 2025, 11:11 AM
Subscribers
None

Details

Summary

Depends on D19905. Ref T13222. In D19843, I refactored this stuff but $jump_into_hisec was dropped.

This is a hint to keep the upgraded session in hisec mode, which we need to do a password reset when using a recovery link. Without it, we double prompt you for MFA: first to upgrade to a full session, then to change your password.

Pass this into the engine properly to avoid the double-prompt.

Test Plan
  • Used bin/auth recover to get a partial session with MFA enabled and a password provider.
  • Before: double MFA prompt.
  • After: session stays upgraded when it becomes full, no second prompt.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable