Uploaded image for project: 'AeroGear'
  1. AeroGear
  2. AEROGEAR-659

OTP authentication will fail after logout event

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • Major
    • 1.0.0.M8
    • None
    • security
    • None

    Description

      Steps to reproduce

      1- Login on aerogear-controller-demo with user: john / password: 123
      2- Try google authenticator
      3- Scan the barcode
      4- Enter the OTP generated to your phone and submit
      5- Logout
      6. Login again and provide the OTP generated to your phone

      It happens because the IDM is under development and user attributes configured here: https://github.com/aerogear/aerogear-security-picketbox/blob/master/src/main/java/org/jboss/aerogear/security/picketbox/idm/AuthenticationKeyProviderImpl.java#L57

      Will never be persisted on PicketLink: https://github.com/picketlink/picketlink/blob/master/idm/impl/src/main/java/org/picketlink/idm/jpa/internal/JPAIdentityStore.java#L959

      Attachments

        Activity

          People

            boliveir_managed_kafka_security (inactive user) Bruno Oliveira Silva (Inactive)
            boliveir_managed_kafka_security (inactive user) Bruno Oliveira Silva (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: