8000 Account logs in without validating the 2FA code · Issue #447 · ivpn/ios-app · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Account logs in without validating the 2FA code #447

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statem 8000 ent. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
gorkapernas opened this issue Aug 7, 2024 · 1 comment · Fixed by #456
Closed

Account logs in without validating the 2FA code #447

gorkapernas opened this issue Aug 7, 2024 · 1 comment · Fixed by #456
Assignees
@jurajhilje
Labels
priority: high type: bug
Milestone
2.12.4

Comments

@gorkapernas
Copy link
Member
gorkapernas commented Aug 7, 2024 •
edited
Loading

Description:

After restoring a purchase, if the account restored has 2FA enabled, it is possible to login without entering the 2FA code.
The user is logged in, but the subscription information is wrong. Sometimes the account appears as inactive or with a date in the past as Active Until 1970-01-01, but in this case, connecting to the VPN does not work.

Furthermore, the user no longer will be able to logout, both regular logout, and logout and clear settings are not working, so the user must delete the app and reinstall it in order to restore the app normal behaviour.

Steps to reproduce:

  1. Make sure the app can restore an account ID.
  2. Enable 2FA for this account.
  3. Proceed to the IVPN app v2.12.3(4).
  4. Tap on "Restore Purchases".
  5. When app attempts to login and presents the 2FA, cancel the 2FA.
  6. Proceed to the account screen and observe that the account is logged in.
  7. Attempt to logout and observe that it is not possible.

Expected result:

The user must validate the 2FA code in order to login, the app should never log the user in automatically.

Environment:

IVPN: 2.12.3 (4)
Device: iPad 10, iPhone XR
OS: iPadOS 17.5.1, iOS 18 Beta
@jurajhilje jurajhilje added this to the 2.12.4 milestone Aug 9, 2024
@jurajhilje jurajhilje moved this from To Do to In Progress in IVPN iOS App Sep 3, 2024
@jurajhilje jurajhilje mentioned this issue Sep 3, 2024
Merged
6 tasks
@jurajhilje jurajhilje moved this from In Progress to In Review / QA in IVPN iOS App Sep 10, 2024
@jurajhilje jurajhilje assigned gorkapernas and unassigned jurajhilje Sep 10, 2024
@gorkapernas
Copy link
Member Author

The issue is no longer reproducible, moving the ticket to deployable.

@gorkapernas gorkapernas moved this from In Review / QA to Deployable in IVPN iOS App Sep 11, 2024
@gorkapernas gorkapernas pinned this issue Sep 11, 2024
@github-project-automation github-project-automation bot moved this from Deployable to Done in IVPN iOS App Sep 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jurajhilje jurajhilje

Labels
priority: high type: bug
Projects
IVPN iOS App
Status: Done
Milestone
2.12.4
Development

Successfully merging a pull request may close this issue.

Account logs in without validating the 2FA code ivpn/ios-app
2 participants
@jurajhilje @gorkapernas
0