u2f not working
piotrekkaminski opened this issue · 3 comments
piotrekkaminski commented
- I was trying with Yubikey and it does not register the device (it worked well with https://demo.yubico.com/).
- It also locked me out of admin - bin/magento msp:security:tfa:disable doesn't disable redirect to yubikey registration.
- Additionally, there is no way to log in as a different admin when you are stuck on registration page
phoenix128 commented
Are you using HTTPS in your Magento store? Yubico keys usage is HTTPS restricted.
About logout and login while in 2fa process you are right, we have to provide a way to exit.
piotrekkaminski commented
Yes – I have HTTPS via let’s encrypt and it shows as secure page. I also don’t get any console errors or anything
---
update: problems was with subpath store.com/path/admin. @phoenix128 is working on a fix.
phoenix128 commented
Fixed in 2.0.4 .