aws-google-auth icon indicating copy to clipboard operation
aws-google-auth copied to clipboard

Just enabled 2FA (again) and I'm not getting the prompt on my phone

Open slikk66 opened this issue 3 years ago • 9 comments

Hi, tried with version .37, I get:

Google Password: 
Check your phone - after you have confirmed response press ENTER to continue.^[

but no prompt comes through.

I also tried this https://github.com/cevoaustralia/aws-google-auth/pull/227 but it doesn't work.

Any other option besides logging out of my phone?

Thanks!

slikk66 avatar Jun 12 '21 16:06 slikk66

I've been having similar issues recently too. Will dig into the underlying calls - likely google has changed something again.

stevemac007 avatar Jun 13 '21 15:06 stevemac007

Thank you.

It actually worked for me this morning, I am running the #227 PR code though (and was last time) so not sure if that is a difference from your case or not.

I noticed that after I posted this issue a few days back, throughout the day on my phone I was receiving google alerts much later in the day for things I had done earlier, I wonder if they were just behind in processing their notifications. I did not ever receive a "are you trying to log in" message, but later in the day I got notifications saying "2 factor disabled" and "2 factor enabled" several hours after I had done those actions trying to debug this issue.

Google Password: 
Check your phone - after you have confirmed response press ENTER to continue.
[  1] arn:aws:iam::12345:role/Role1
[  2] arn:aws:iam::12345:role/Role2
Type the number (1 - 2) of the role to assume: 2
Assuming arn:aws:iam::12345:role/Role2
Credentials Expiration: 2021-06-14 22:56:25-06:00

edit: also, when it worked this morning the "are you trying to sign in" prompt looked different than I had ever seen before, perhaps they were upgrading them? thanks for looking into it, I'm moving my entire org to required 2 factor, so for the engineers who use it on the CLI we would definitely want to make sure it is working.

slikk66 avatar Jun 14 '21 17:06 slikk66

I just came across this today after never having an issue. No prompt on my phone.

mjsalinger avatar Jul 20 '21 15:07 mjsalinger

I forgot I put this issue up - I believe that I found the problem (at least for me), sorry for not posting it sooner!

On my Android phone, I found that some of the google services, I believe specifically the "google play" service was being put to sleep by the OS. I went into settings, search for "never sleeping apps" and added all of the google, google play, apps into that list and now I get the prompts consistently.

slikk66 avatar Jul 20 '21 15:07 slikk66

I've been experiencing this as well since yesterday. I've tried adding the google play apps to the non-optimized list but that didn't change anything. I can not get a prompt regardless of what I try. I configured my account on a completely different android device, after a factory reset and I still can't get a prompt.

pmbeaumier avatar Jul 21 '21 21:07 pmbeaumier

I've been experiencing at the no prompt on my phone too. I checked that currently after the password challenge Google redirect to its default challenge that is Prompt normally. I've created a PR #235 that allow use this and other MFA methods

michaellouredo avatar Jul 22 '21 17:07 michaellouredo

+1 For PR #235

JPLemelin avatar Sep 20 '21 18:09 JPLemelin

+1 for https://github.com/cevoaustralia/aws-google-auth/pull/235

mdouglass avatar Sep 28 '21 17:09 mdouglass

+1 for https://github.com/cevoaustralia/aws-google-auth/pull/235

bmf-san avatar Mar 15 '22 04:03 bmf-san