Skip to content

Fix admin MFA flow for tctl bots add#39220

Merged
Joerger merged 4 commits intomasterfrom
joerger/fix-add-bot-with-token
Mar 12, 2024
Merged

Fix admin MFA flow for tctl bots add#39220
Joerger merged 4 commits intomasterfrom
joerger/fix-add-bot-with-token

Conversation

@Joerger
Copy link
Copy Markdown
Contributor

@Joerger Joerger commented Mar 12, 2024

After #38479 was introduced, tctl bots add --token=<token> would fail due to a reusable MFA challenge being used in the request. This PR fixes this by:

  • Allowing reusable MFA challenges to get/list tokens
  • Fixing the underlying logic to re-prompt for MFA after this type of failure. This will avoid similar issues going forward as endpoints are changed/added.

Changelog: Fix a bug that caused some MFA for Admin Action flows to fail instead of retrying: ex: tctl bots add --token=<token>.

Comment thread api/utils/grpc/interceptors/mfa.go Outdated
Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
@Joerger Joerger added this pull request to the merge queue Mar 12, 2024
Merged via the queue into master with commit 0b72ea6 Mar 12, 2024
@Joerger Joerger deleted the joerger/fix-add-bot-with-token branch March 12, 2024 20:40
@public-teleport-github-review-bot
Copy link
Copy Markdown

@Joerger See the table below for backport results.

Branch Result
branch/v15 Create PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants