2FAuth icon indicating copy to clipboard operation
2FAuth copied to clipboard

Only one Webauthn Device funtioning

Open phoenix1184 opened this issue 2 years ago • 5 comments

Version

4.2.0

Details & Steps to reproduce

Using 2Fauth with PostgreSQL

Registering multiple 2FA devices Webauthn works. Login only works with the first device registered.

Expectation

Login with multiple devices For example: Yubikey, Windows Hello, iphone.

Error & Logs

No response

Execution environment

Compose

Containerization

  • [x] Docker

Additional information

No response

phoenix1184 avatar Dec 16 '23 15:12 phoenix1184

Hey Bubka I've tested the above bug again with SQLite is no problem. Everything works as expected.

It must be a problem with PostgreSQL installation.

I've tested both methods without export /import of any Data. So both are fresh installations and table generations. No error in Logs.

Beside this everything works fine.

phoenix1184 avatar Dec 16 '23 15:12 phoenix1184

As I can tell from further inspection, when importing the webauthn_credentials table from SQLite to PostgrSQL everything works as expected. I think there must be an error by generating the public key

phoenix1184 avatar Dec 16 '23 16:12 phoenix1184

Thanks for all these information. I don't have a PostgrSQL right now to test, I will need to set up one.

Login only works with the first device registered

You mean each device works as long as it is registered as the first one? Regardless of how many devices are registered?

Bubka avatar Dec 18 '23 10:12 Bubka

Thanks for all these information. I don't have a PostgrSQL right now to test, I will need to set up one.

Login only works with the first device registered

You mean each device works as long as it is registered as the first one? Regardless of how many devices are registered?

Correct. Each device will wok as long as it ist the firest one registered, no matter how many devices are registerd.

phoenix1184 avatar Dec 19 '23 15:12 phoenix1184

From my test also the recovery device never work. https://github.com/Bubka/2FAuth/issues/298 so if a device is lost, seems will be no more possible to login

PeopleInside avatar Feb 15 '24 14:02 PeopleInside