Secret Key needed - why?

mel
Offline

Support Specialist

1 month 1 week ago #68892 by mel

Replied by mel on topic Secret Key needed - why?

@fabmur Yes, that's fine.

I'm having an extremely hard time reproducing this issue on my test sites. Trying multiple settings configurations. Even on your live site before you made the code change, I was able to create a user and log in without a secret key prompt. On your test site, would you be able to install the 9.1.77 version and give me backend access so that I can see what's different about our configurations?

The topic has been locked.

fabmur
Offline

Active Subscriptions:

None

1 month 1 week ago #68893 by fabmur

Replied by fabmur on topic Secret Key needed - why?

Hi Melissa. On my test site, 9.1.77 version is already installed, and after changing code, I do not get any secret key prompt.
The only problem that I have now is that Login button doesn't work in submenu items.

As for backend access, how can I send you safely?

A private message?

The topic has been locked.

mel
Offline

Support Specialist

1 month 1 week ago #68894 by mel

Replied by mel on topic Secret Key needed - why?

I meant re-apply the code to the original form without the change I suggested. The code I sent was incomplete, which is probably why the login button doesn't work on the subpages.

You can send a Contact Us form at the top of the page with the credentials.

The topic has been locked.

fabmur
Offline

Active Subscriptions:

None

1 month 1 week ago #68895 by fabmur

Replied by fabmur on topic Secret Key needed - why?

mel wrote: I meant re-apply the code to the original form without the change I suggested. The code I sent was incomplete, which is probably why the login button doesn't work on the subpages.

You can send a Contact Us form at the top of the page with the credentials.

Ok. I've restored original code on my demo site.
I'll send super user access credentials in a while.

The topic has been locked.

mel
Offline

Support Specialist

1 month 1 week ago - 1 month 1 week ago #68896 by mel

Replied by mel on topic Secret Key needed - why?

I tested on your demo site and at first I could not get the code prompt to occur every single time, using either my sourcecoast user or the super user. It did show up eventually for me, so I installed a test build on the site and the error disappeared for me. However, since it was not consistent for me, I cannot say whether the build fixed it or not.

1. With whatever user that you are consistently having the error, please attempt to log in on your demo and see if it still occurs.

Last edit: 1 month 1 week ago by mel.

The topic has been locked.

mel
Offline

Support Specialist

1 month 1 week ago - 1 month 1 week ago #68898 by mel

Replied by mel on topic Secret Key needed - why?

This fix in the above actually breaks the secret key being shown in modal if that's how SCLogin is being displayed. I need to put some more thought into it. In the meantime, revert back to 9.1.76. It's now the active release for the Download Now button at www.sourcecoast.com/sclogin/

Last edit: 1 month 1 week ago by mel.

The topic has been locked.

fabmur
Offline

Active Subscriptions:

None

1 month 1 week ago #68901 by fabmur

Replied by fabmur on topic Secret Key needed - why?

Hi Melissa.

I've tested on my demo site, and I do not get any secret key prompt, but sc login again doesn't work in submenu items.

On my live site, I've restored 9.1.76. version. I don't get the prompt, but, even there, 76 version of sc login doesn't work in submenu items. At the moment, I have to disable the extension and use joomla login module, even if it is not compact as I need.

The topic has been locked.

mel
Offline

Support Specialist

1 month 6 days ago #68902 by mel

Replied by mel on topic Secret Key needed - why?

I've put an updated version on your demo site. Can you look at your sub-items and see if it's fixed now? I've tested on some, but would like you to have a more thorough test.

After talking with Alex, we've decided for J4.2 and later, we're going to rely on Joomla to handle the mutli-factor authentication more and strip out some of the MFA auth functionality in our code that we wrote in earlier versions. Joomla's system is pretty robust and the back and forth between the module and Joomla is overly complicated from our side now.

-Melissa

The topic has been locked.

fabmur
Offline

Active Subscriptions:

None

1 month 6 days ago - 1 month 6 days ago #68904 by fabmur

Replied by fabmur on topic Secret Key needed - why?

mel wrote: I've put an updated version on your demo site. Can you look at your sub-items and see if it's fixed now? I've tested on some, but would like you to have a more thorough test.

After talking with Alex, we've decided for J4.2 and later, we're going to rely on Joomla to handle the mutli-factor authentication more and strip out some of the MFA auth functionality in our code that we wrote in earlier versions. Joomla's system is pretty robust and the back and forth between the module and Joomla is overly complicated from our side now.

-Melissa

I've tested on different submenu items of my demo site, and everything seems ok.

So, I wait for a new official version release to update my live site.

Thanks. Fabio

Last edit: 1 month 6 days ago by fabmur.

The topic has been locked.

mel
Offline

Support Specialist

1 month 6 days ago #68905 by mel

Replied by mel on topic Secret Key needed - why?

The release is up on at www.sourcecoast.com/sclogin/ with the Download button.

For anyone else following this thread, the release is intended for Joomla 4.2 and later releases only. It will break 2FA for earlier Joomla versions without some slight modifications (uncommenting out some specific code).

-Melissa

The topic has been locked.

SourceCoast Login

Secret Key needed - why?