App icon indicating copy to clipboard operation
App copied to clipboard

[$250] User is able to disable 2FA when connected to Xero accounting

Open m-natarajan opened this issue 3 months ago • 33 comments

If you haven’t already, check out our contributing guidelines for onboarding and email [email protected] to request to join our Slack channel!


Version Number: 9.0.64-4 Reproducible in staging?: Y Reproducible in production?: Y If this was caught on HybridApp, is this reproducible on New Expensify Standalone?: If this was caught during regression testing, add the test name, ID and link from TestRail: Email or phone of affected tester (no customers): Logs: https://stackoverflow.com/c/expensify/questions/4856 Expensify/Expensify Issue URL: Issue reported by: @allgandalf Slack conversation (hyperlinked to channel name): ts_external_expensify_bugs

Action Performed:

  1. Connect to Xero
  2. Disable two-factor authentication in settings

Expected Result:

We should block this with a RHP stating that we cannot disable two-factor auth while connected to xero

Actual Result:

User is able to disable two-factor authentication and on each login it just asks the user to re-enable it

Workaround:

Unknown

Platforms:

Which of our officially supported platforms is this issue occurring on?

  • [ ] Android: Standalone
  • [ ] Android: HybridApp
  • [ ] Android: mWeb Chrome
  • [ ] iOS: Standalone
  • [ ] iOS: HybridApp
  • [ ] iOS: mWeb Safari
  • [x] MacOS: Chrome / Safari
  • [ ] MacOS: Desktop

Screenshots/Videos

Add any screenshot/video evidence

https://github.com/user-attachments/assets/a45269eb-8c61-4e30-83f5-5e589b882baf

View all open jobs on GitHub

Upwork Automation - Do Not Edit
  • Upwork Job URL: https://www.upwork.com/jobs/~021859734183969700022
  • Upwork Job ID: 1859734183969700022
  • Last Price Increase: 2024-11-28
  • Automatic offers:
    • allgandalf | Reviewer | 105196111
    • FitseTLT | Contributor | 105196113
Issue OwnerCurrent Issue Owner: @
Issue OwnerCurrent Issue Owner: @allgandalf

m-natarajan avatar Nov 20 '24 20:11 m-natarajan