No Code Attached Yet
avatar PhilETaylor
PhilETaylor
16 Aug 2022

Steps to reproduce the issue

Install Joomla 4.2.0 on a server without GMP and bcmath PHP Extensions
Login to Joomla Admin and Enable Multi Auth using an Web Authentication (Touch ID on Mac)
Joomla allows this, and secures your account.

Logout

Attempt to login again

Expected result

Expect to be prevented from locking myself and users, out of their accounts

Expect not to be able to SET UP and LOCK an account if the server then cannot authenticate that multi-auth authenticator due to server requirements not being met.

Actual result

Im now forever locked out of my account because I was allowed to enable multi-auth but my server doesn't have GMP or bcmath extensions and so I cannot login on the captive login page

Screen Shot 2022-08-16 at 22 53 50

avatar PhilETaylor PhilETaylor - open - 16 Aug 2022
avatar joomla-cms-bot joomla-cms-bot - change - 16 Aug 2022
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 16 Aug 2022
avatar PhilETaylor PhilETaylor - change - 16 Aug 2022
The description was changed
avatar PhilETaylor PhilETaylor - edited - 16 Aug 2022
avatar PhilETaylor PhilETaylor - change - 16 Aug 2022
The description was changed
avatar PhilETaylor PhilETaylor - edited - 16 Aug 2022
avatar PhilETaylor PhilETaylor - change - 16 Aug 2022
The description was changed
avatar PhilETaylor PhilETaylor - edited - 16 Aug 2022
avatar PhilETaylor
PhilETaylor - comment - 16 Aug 2022

Compare the new Multi-auth Web Authentication set up screen with the old W3C Web Authentication (WebAuthn) Login screen (which is also still available) which clearly, up front, stops you from using it if the requirements are not met.

Screen Shot 2022-08-16 at 23 00 49

avatar nikosdion
nikosdion - comment - 17 Aug 2022

Thank you for NOT reporting this three months ago when I had abandoned my business for a whole month to contribute this feature and for just whining instead of proposing a code solution. Yes of course I will cancel the first vacation I had tried to take in three years to write code for the issues you are filing three months too late, playing all high and mighty, when the reality is that you COULD have contributed three months ago but couldn't be arsed. Thank you for nothing, Phil.

avatar PhilETaylor
PhilETaylor - comment - 17 Aug 2022

What a stupid and absurd way to respond to genuine issues reported in an Open Source Project. Thank you for proving the Joomla project is still a toxic place. Pathetic.

when I had abandoned my business for a whole month to contribute this feature

I do not dictate what you do with your time - you have no right to dictate what I do with my time

just whining

Reporting issues with open source software is not whining.

Yes of course I will cancel the first vacation I had tried to take in three years

No one expects that, and I certainly did not demand that.

playing all high and mighty

Im sorry that you believe reporting genuine issues (That a super user can become fully and permanently locked out of their account) to an open source project is " playing all high and mighty" - get real.

when the reality is that you COULD have contributed three months ago but couldn't be arsed.

I choose to contribute to non-toxic projects where my contributions are welcome, unlike receiving the tirade of abuse from you shows that Im not welcome here. Its not about being "arsed" its about spending my time on projects that bring happiness and where my contributions are valued and encouraged - instead of personal abuse and tirades. You alone prove why people dont contribute to Joomla anymore.

Thank you for nothing, Phil.

Im sorry you feel that my contributions are worth nothing. In a non-toxic project you would have been banned already.

avatar rdeutz
rdeutz - comment - 17 Aug 2022

@PhilETaylor thanks for reporting, @nikosdion enjoy your vacation. Maintenance will look at it.

avatar nikosdion
nikosdion - comment - 17 Aug 2022

@PhilETaylor Oh come on, Phil! I am replying to your issue on the same tone this issue and all your other issues the last 10 hours are written. Funny you don't like others treating you the same way you treat them, huh?

Count how many times you use the word "fiasco" in your issues the last 9 hours. Count how many personal attacks you have made. Even here you are spreading FUD by making what you know is a FALSE CLAIM you are "forever locked out" of your Joomla account. The only thing you achieve with this kind of false and unfair comments is undoing ten years of trying to educate users on account security and give them the tools to protect their sites.

Please talk to people the same way you want them to talk to you.

In any case, I am going to write code to fix this. @rdeutz thanks for the offer but I am not one to throw code over the wall and call it a day.

avatar nikosdion
nikosdion - comment - 17 Aug 2022

@rdeutz Please assign this issue to me

avatar rdeutz
rdeutz - comment - 17 Aug 2022

@nikosdion ok, done.

avatar PhilETaylor
PhilETaylor - comment - 17 Aug 2022

I have not made a single personal attack. I have identified and reported genuine issues with the Joomla 4.2 release that could and should have been found during testing by the teams dedicated to testing the release.

It is a fiasco (Defined as "a complete failure, especially a ludicrous or humiliating one.") that, yet again, a major release has had to be pulled by the Joomla project due to issues that should and would have been caught by better quality testing.

It is not on me to test, it is not my fault that this happened. I simply report what I see.

I shall not entertain your drama.

avatar nikosdion
nikosdion - comment - 17 Aug 2022

Pull request #38488. Please test.

avatar alikon alikon - change - 17 Aug 2022
Status New Closed
Closed_Date 0000-00-00 00:00:00 2022-08-17 07:18:11
Closed_By alikon
avatar alikon alikon - close - 17 Aug 2022
avatar nikosdion
nikosdion - comment - 17 Aug 2022

@PhilETaylor Okay, let's take a deep breath. As one neurodivergent person to another: the way we perceive others' words and the way we perceive how our words might affect others are not always in line with how most people do. Let's stop bickering and start working together. In the end of the day and regardless of the words we exchanged we both want to help Joomla succeed. I am sorry for misunderstanding the tone of your voice and do understand that you also read more to my reply than I said. While I am disappointed that you didn't test in May — yet you are right that I cannot and I will not dictate how you use your own time — I was also being factual, not snarky, saying that I am cutting my vacation short (at least for today) to help fix what is broken in the code I contributed. I feel responsibility for my code. So let's stop bickering and work together. Thank you.

Add a Comment

Login with GitHub to post a comment