Switching languages during multifactor authentication results in an error
31 views
Skip to first unread message
Patrick Weiner
Apr 13, 2021, 10:39:33 AM4/13/21
to Keycloak Dev
Hi all,
I need your help.
When I'm already logged in (via cookie) and try to switch the language during a multifactor-authentication, it results in an error (invalid_request).
I've configured the following flow to test this:
To reproduce this choose a user who has not the role specified in the flow (condition - user role) and login. Afterwards assign the role to the same user and try to do the authentication again. Now there should be the password-form displayed and when trying to switch the language it results in the aforementioned error.
When I debugged this behaviour, I found out that the URLs are built differently because in the FreeMarkerLoginFormsProvider the default-case is used for LOGIN_PASSWORD, and not here.
Because there are a lot of LoginFormsPages defined, is it feasible to change the default-case to the LOGIN case or does it affect anything else negatively?
Thanks a lot,
Patrick
I need your help.
When I'm already logged in (via cookie) and try to switch the language during a multifactor-authentication, it results in an error (invalid_request).
I've configured the following flow to test this:
To reproduce this choose a user who has not the role specified in the flow (condition - user role) and login. Afterwards assign the role to the same user and try to do the authentication again. Now there should be the password-form displayed and when trying to switch the language it results in the aforementioned error.
When I debugged this behaviour, I found out that the URLs are built differently because in the FreeMarkerLoginFormsProvider the default-case is used for LOGIN_PASSWORD, and not here.
Because there are a lot of LoginFormsPages defined, is it feasible to change the default-case to the LOGIN case or does it affect anything else negatively?
Thanks a lot,
Patrick
Stian Thorgersen
Apr 21, 2021, 4:54:45 AM4/21/21
to Patrick Weiner, Keycloak Dev
Can you create a bug report for this one please?
--
You received this message because you are subscribed to the Google Groups "Keycloak Dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-dev...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-dev/cb083550-7fa3-48d4-bede-b707180038f8n%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages