[#45882] - Too many redirects when privacy consent expired and MFA enabled
- New
- Medium
- Build: 5.3-dev
- # 45882
Steps to reproduce the issue
- I've installed a new instance of Joomla 5.3.2.
- Switched on the Privacy plugin
- Actived MFA on Registerd role
- Created a new user in the backend (so no consent)
- Tried to log in with the newly created user.
Expected result
I expected a profile page to setup MFA and give the privacy consent
Actual result
"Too many redirects" occurs. Website unusable by user as actually logged in.
System information (as much as possible)
Joomla 5.3.2
PHP 8.3.8
10.6.18-MariaDB-cll-lve
Apache/2
Mozilla/5.0
Additional comments
Issue was already addressed in #44653.
Is the combination of #44522 and #44521 tested? Because I'm running Joomla 5.3.2 now with MFA and Privacy and users are getting in the never ending loop redirect mentioned in #44522.
joomla-cms-bot
- | Labels |
Added:
No Code Attached Yet
|
||
@joomla-cms-bot I’m happy to work on this issue. Could you please assign it to me?
@Satish-Medar Thanks for your interest - we do not assign issues. Anyone is free to submit a pull request
Fix for "Too many redirects when privacy consent expired and MFA enabled"
#45882
Hi @brianteeman,
I'd like to tackle issue #45882 where users get stuck in a redirect loop with privacy consent and MFA. I've checked the code and found the conflict between the privacy consent and MFA plugins.
Proposed Fix =>
Update privacy consent to handle MFA tasks
Add MFA page checks
Fix the redirect flow
I can submit a PR with:
Test coverage
Code standards followed
Clear documentation
Let me know if you'd like me to proceed.
Let me know if you'd like me to proceed.
As I already stated "Thanks for your interest - we do not assign issues. Anyone is free to submit a pull request"
Fix for "Too many redirects when privacy consent expired and MFA enabled"
#45882 Hi @brianteeman,
I'd like to tackle issue #45882 where users get stuck in a redirect loop with privacy consent and MFA. I've checked the code and found the conflict between the privacy consent and MFA plugins.
Proposed Fix =>
Update privacy consent to handle MFA tasks Add MFA page checks Fix the redirect flow I can submit a PR with:
Test coverage Code standards followed Clear documentation Let me know if you'd like me to proceed.
Yes, please proceed!
sure
Retried it with Joomla 6.0.0-alpha4-dev.
Same result