Top Menu

Jump to content
    Global modules

    Global modules

    • Home
    • Projects
    • Activity
    • Work packages
    • Gantt charts
    • Calendars
    • Team planners
    • Boards
    • News
    Home
    Home
Help
    Getting started
    • Introduction video
  • Help and support
    • Upgrade to Enterprise edition
    • User guides
    • Videos
    • Shortcuts
    • Community forum
    • Enterprise support
  • Additional resources
    • Data privacy and security policy
    • Digital accessibility (DE)
    • OpenProject website
    • Security alerts / Newsletter
    • OpenProject blog
    • Release notes
    • Report a bug
    • Development roadmap
    • Add and edit translations
    • API documentation

User menu

Sign in
Forgot your password?

or sign in with your existing account

OpenProject ID Google

Side Menu

Collapse project menu

  • Overview
  • Activity
    Activity
  • Roadmap
  • Work packages
    Work packages
  • Gantt charts
    Gantt charts
  • Calendars
    Calendars
  • Team planners
    Team planners
  • Boards
    Boards
  • News
  • Forums

Content

Expand project menu

Updated by Klaus Zanders 10 months ago

### Steps to reproduce

1. Be a user that has **more than one** a two factor authentication method set up.

2. Try to log in as that user

3. On
user, stop at the screen where the 2FA options are shown, switch you have to another method, don't do anything further select a two factor auth method

4. 3. As an administrator, delete **all** the users two factor account methods

5. 4. As the user, try to sign in again, enter email cancel the started login process and password and try to sign in again


### What is the buggy behavior?

* Instead of successfully logging in it shows a 500 error


This behavior showed up, when my old community account was reactivated and I do not have access to the old two factor code anymore. So I tried to sign in, an administrator deleted my 2fa methods and then I tried to sign in again.

The fix was deleting my session cookie and then logging in again.

Reason for this is that the session has the currently selected 2fa device stored in a session variable and when trying to find this device it throws the error because it cannot be found anymore

### What is the expected behavior?

1. The user should be able to sign in, eventhough the session currently has a non existant 2fa device stored.


### Screenshots and other files

_If you have screenshots of the application's bug behavior or other relevant files, please drag them into this place or attach them using the "Files" section._

### Environment information

_Community_

**OpenProject version**

_15.0.1_

**Browser**

* [ ] Chrome
* [x] Firefox
* [ ] Safari
* [ ] Mobile Safari
* [ ] Other (please specify)

**Operating System**

* [ ] Windows
* [x] Mac OS X
* [ ] Mobile iOS
* [ ] Mobile Android
* [ ] Linux (please specify distro)
* [ ] Chrome OS
* [ ] Other (please specify)

**Language**

_German_

Back

Loading...