WordPress-Android icon indicating copy to clipboard operation
WordPress-Android copied to clipboard

No message shown when SMS rate limiting applies

Open guarani opened this issue 3 years ago • 1 comments

Expected behavior

When logging in via SMS-based two-factor authentication (2FA), the app should display a message to the user if it unable to send the SMS code (e.g. due to rate-limiting of one message per minute).

Actual behavior

When the app is unable to send an SMS code, it doesn't notify the user. Instead, the message simply doesn't arrive and this leads to potential user confusion.

Steps to reproduce the behavior

  1. Locate a WP.com account with SMS-based 2FA
  2. The following steps should be done in quick succession (within 60 seconds): a. Perform an action that requires an SMS code to be used (e.g. change the account password on WordPress.com via the browser) b. Log in to the WPAndroid app and notice the app indicates that a message has been sent
  3. Notice that no SMS is received
  4. (Optional) Wait till 60 seconds after Step 2a was performed and try again: notice that the SMS arrives correctly

Desired solution

It would be nice to show a message similar to WP.com, which displays "SMS codes are limited to once per minute. Please wait and try again". This was discussed in https://github.com/wordpress-mobile/WordPress-Android/issues/15961#issuecomment-1046830033.

Screen Shot 2022-03-02 at 17 14 06
Tested on Samsung S10, Android 11, WPAndroid 19.2

guarani avatar Mar 02 '22 20:03 guarani

I ran into this review of the 22.9 beta and it could be related, but it's not clear yet what the problem is:

authenticator not recognize, text code not responding ,cant login please fix

The "text code not responding" sounds like it could be the SMS not arriving, which matches this issue.

guarani avatar Aug 14 '23 18:08 guarani