📢 Moderators Needed 🚀

Moderators are needed with resources to post or have access to resources to post. Submit an application to be considered.
K

RSS Login via Passkey sets remember but not tfa_trust cookie

K

Kirby

Guest
Guest or Bot
When logging in with a Passkey, XenForo automatically sets cookie _user so th user stays "logged in" but it does not set cookie tfa_trust so for the next session a TFA verification is required - which can be performed with the same Passkey that was used to initially log in.

IMHO this doesn't make much sense and probably annoys & confuses users.

XenForo should either
  1. Always set user and tfa_trust cookies when logging in via Passkey
    Preferred
  2. Never...

Read more

Continue reading...
 
Similar content Most view View more
Back
Top