Skip to content

[v13] fix: Explicitly mention OTPs on tsh/Windows logins#30444

Merged
codingllama merged 1 commit into
branch/v13from
bot/backport-30302-branch/v13
Aug 14, 2023
Merged

[v13] fix: Explicitly mention OTPs on tsh/Windows logins#30444
codingllama merged 1 commit into
branch/v13from
bot/backport-30302-branch/v13

Conversation

@codingllama
Copy link
Copy Markdown
Contributor

Backport #30302 to branch/v13

Explicitly mention OTPs, when running tsh login on Windows, if the user has
both OTP and WebAuthn registered.

"Platform" logins, like Windows WebAuthn, do not use the "normal" MFA prompts.
This makes sense, as the OS shows its own dialogs. In the case of Touch ID we
know the login will succeed, so it just takes over. For Windows, less so.

This customizes the Windows prompt when OTP and WebAuthn are possible. Note that
the Windows platform prompt is a modal and must be canceled before the OTP is
entered, that's why the message says "enter the code here".

Example:

$ tsh.exe login #(...)
> Enter password for Teleport user llama:
> Follow the OS dialogs for platform authentication, or enter an OTP code here:
*ESC to cancel modal*
*type OTP, enter*
> Profile URL: (...)

#25051

@codingllama codingllama added this pull request to the merge queue Aug 14, 2023
Merged via the queue into branch/v13 with commit 2f5c62c Aug 14, 2023
@codingllama codingllama deleted the bot/backport-30302-branch/v13 branch August 14, 2023 18:44
@fheinecke fheinecke mentioned this pull request Sep 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants