Secret Key needed - why?

fabmur
Offline

Active Subscriptions:

None

1 month 1 week ago #68878 by fabmur

Secret Key needed - why? was created by fabmur

After last upgrade, when logging in a secret key is asked (password is not enough). Why?

I've noticed that if you do not enter any secret key and press Log in button, you access to you account anyway.

This procedure is a bit confusing for users.

And where should they set their secret key?

The topic has been locked.

mel
Offline

Support Specialist

1 month 1 week ago #68880 by mel

Replied by mel on topic Secret Key needed - why?

The secret key should only be showing if Multifactor plugins or Passkeys are enabled on your site. What version of Joomla are you running, so I can try to reproduce this on my test site. Can you provide a URL where I can see the behavior in action?

Multifactor auth keys and passkeys can be set in the Joomla User profile after a user is logged in. This is separate from SCLogin

-Melissa

The topic has been locked.

fabmur
Offline

Active Subscriptions:

None

1 month 1 week ago - 1 month 1 week ago #68881 by fabmur

Replied by fabmur on topic Secret Key needed - why?

mel wrote: The secret key should only be showing if Multifactor plugins or Passkeys are enabled on your site. What version of Joomla are you running, so I can try to reproduce this on my test site. Can you provide a URL where I can see the behavior in action?

Multifactor auth keys and passkeys can be set in the Joomla User profile after a user is logged in. This is separate from SCLogin

-Melissa

The account I use when I try to log in has no multifactor auth key or passkey enabled. You can check at waterwind.it.

Joomla version used is the latest.

Let me know. Thanks

Last edit: 1 month 1 week ago by fabmur.

The topic has been locked.

mel
Offline

Support Specialist

1 month 1 week ago #68882 by mel

Replied by mel on topic Secret Key needed - why?

What version of Joomla are you running? Is it earlier than 4.2?

In /modules/mod_sclogin/helper.php, around line 230, can you replace

if ($result)// && $result->otpKey != '')

with

if ($result && $result->otpKey != '')

and see if this fixes the behavior?

The topic has been locked.

fabmur
Offline

Active Subscriptions:

None

1 month 1 week ago #68884 by fabmur

Replied by fabmur on topic Secret Key needed - why?

mel wrote: What version of Joomla are you running? Is it earlier than 4.2?

In /modules/mod_sclogin/helper.php, around line 230, can you replace
if ($result)// && $result->otpKey != '')
with
if ($result && $result->otpKey != '')
and see if this fixes the behavior?

No, as I said, Joomla version is the latest, so the 5.0.3.

I will try to do what you suggested asap.

Did you check my site and verify what happens?

The topic has been locked.

mel
Offline

Support Specialist

1 month 1 week ago - 1 month 1 week ago #68885 by mel

Replied by mel on topic Secret Key needed - why?

Sorry, I missed that bit about the version.

I created a user on your site and filled out the form with the username and password. When I pressed the Log in button, I was logged in as expected without a code. I did not see a prompt for a code.

Did you press the Sign in With Passkey button? That is not the same thing as Log in. If you have the 'System - Passkey (Passwordless) Login' plugin enabled this button does Passkey login.

Last edit: 1 month 1 week ago by mel.

The topic has been locked.

fabmur
Offline

Active Subscriptions:

None

1 month 1 week ago - 1 month 1 week ago #68887 by fabmur

Replied by fabmur on topic Secret Key needed - why?

Obviously, I click on login button.
I changed the line 230 in helper.php, as you wrote, and this change has partially solved the problem. The module now works in some menu items (homepage, forum), but not in others (submenu).

I had to disable the module, since it's my live site. If you want you can further check at my demo site: www.waterwind.it/demo/en/

thanks

Last edit: 1 month 1 week ago by fabmur.

The topic has been locked.

Agnes
Offline

Active Subscriptions:

None

1 month 1 week ago #68889 by Agnes

Replied by Agnes on topic Secret Key needed - why?

Hello!

Same situation, both plugins: Multi-factor Authentication - Passkey and System - Passkey are disabled. But the secret key requirement is poping-up...
Rather frustrating as it's blocking users to log in the frontend site where SCLogin is activated.
Any better solution that editing the mod_sclogin/helper.php ?

The topic has been locked.

mel
Offline

Support Specialist

1 month 1 week ago #68890 by mel

Replied by mel on topic Secret Key needed - why?

If you would like to rollback to the previous SCLogin release while we're looking into the issue, you can grab it here

www.sourcecoast.com/index.php/sclogin-prev-release

The following user(s) said Thank You: Agnes

The topic has been locked.

fabmur
Offline

Active Subscriptions:

None

1 month 1 week ago #68891 by fabmur

Replied by fabmur on topic Secret Key needed - why?

mel wrote: If you would like to rollback to the previous SCLogin release while we're looking into the issue, you can grab it here

www.sourcecoast.com/index.php/sclogin-prev-release

Ok. Do I simply install it over the latest version?

The topic has been locked.

SourceCoast Login

Secret Key needed - why?