Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Reset security key" during login verification gets stuck in a loop #29120

Open
richvdh opened this issue Jan 28, 2025 · 1 comment
Open

"Reset security key" during login verification gets stuck in a loop #29120

richvdh opened this issue Jan 28, 2025 · 1 comment
Labels
A-E2EE A-E2EE-Cross-Signing A-Login O-Occasional Affects or can be seen by some users regularly or most users rarely S-Minor Impairs non-critical functionality or suitable workarounds exist T-Defect

Comments

@richvdh
Copy link
Member

richvdh commented Jan 28, 2025

Steps to reproduce

  1. Log in a new device
  2. Observe "Verify this device" modal: Image
  3. Click "Verify with security key [or phrase]" (see also EW refers to "security key" instead of "recovery key" #27713)
  4. Observe "Security phrase" modal: Image
  5. Click "Reset all"
  6. Observe confirmation modal: Image
  7. Click "Reset"
  8. Observe "Set up secure backup" modal: Image
  9. Click "Continue".
  10. Copy the keys
  11. Enter the account password when prompted
  12. Observe confirmation modal (with the wrong words, but never mind that): Image
  13. Click "Done"

Outcome

What did you expect?

After all that, my device is correctly verified, so I should see the proper chat interface

What happened instead?

Back to step 2.

Provided the "force verification at login" option is not set, I can dismiss the modal, and carry on using the app correctly.

Operating system

No response

Browser information

No response

URL for webapp

No response

Application version

No response

Homeserver

No response

Will you send logs?

No

@richvdh richvdh added T-Defect S-Minor Impairs non-critical functionality or suitable workarounds exist A-E2EE-Cross-Signing O-Occasional Affects or can be seen by some users regularly or most users rarely labels Jan 28, 2025
@dosubot dosubot bot added A-E2EE A-Login O-Uncommon Most users are unlikely to come across this or unexpected workflow S-Major Severely degrades major functionality or product features, with no satisfactory workaround labels Jan 28, 2025
@richvdh richvdh removed S-Major Severely degrades major functionality or product features, with no satisfactory workaround O-Uncommon Most users are unlikely to come across this or unexpected workflow labels Jan 29, 2025
@richvdh
Copy link
Member Author

richvdh commented Jan 29, 2025

It's also worth pointing out that the "Reset all" in the "Verify this device" modal does something different: it skips the verification step (ie, opens the chat interface) and then opens the "Set up secure backup" modal. That means that you don't get caught in a loop, but the fact the two "Reset all" buttons are different is... unexpected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-E2EE A-E2EE-Cross-Signing A-Login O-Occasional Affects or can be seen by some users regularly or most users rarely S-Minor Impairs non-critical functionality or suitable workarounds exist T-Defect
Projects
None yet
Development

No branches or pull requests

1 participant