aspnet/Identity

Block enabling 2fa if cookie policy not accepted

HaoK opened this issue · 2 comments

HaoK commented

Not accepting the cookie policy prevents temp cookies from being used which interrupts 2fa flows like displaying recovery codes (which is an issue during registration).

The fix for 2.2 is to block the ability to enable 2fa when cookie consent is not given.

Eilon commented

Do we need another bug opened to track the 3.0 work where we want to see if we can just make this all work?

cc @ajcvickers