Bug 36011 - 2FA authentication failure is incorrectly logged as success
Summary: 2FA authentication failure is incorrectly logged as success
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Authentication (show other bugs)
Version: 22.11
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on: 20476
Blocks:
  Show dependency tree / graph
 
Reported: 2024-02-07 08:34 UTC by Ola Andersson
Modified: 2024-11-15 10:46 UTC (History)
3 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ola Andersson 2024-02-07 08:34:41 UTC 
A user failing to sign in four times with a correct username/password but incorrect 2FA passcode will incorrectly yield four records in action_logs with AUTH SUCCESS