2FA name is not copied from email when 2FA is mandaroy in user role #2426

Closed
opened 2026-02-05 04:06:48 +03:00 by OVERLORD · 1 comment
Owner

Originally created by @larciere on GitHub (Oct 12, 2021).

Describe the bug
The 2FA name and email address in the mobile app (Google Auth) does not use the correct email address for user roles where 2FA is mandatory. The account is showing "(guest@example.com)" where the name is correct, but the user email address is not used.

Steps To Reproduce
Steps to reproduce the behavior:

  1. Create new account with an assigned user role that requires 2FA
  2. Login with link from email
  3. Add password
  4. Add 2FA with Mobile app (google auth)
  5. 6 digit code is provided with name: guest@example.com in mobile phone.

Expected behavior
User email address should be used. This is the case when the same user reconfigures the 2FA from their profile settings.

Screenshots
N/A

Your Configuration (please complete the following information):
Docker image: ghcr.io/linuxserver/bookstack
BookStack v21.08.5

Originally created by @larciere on GitHub (Oct 12, 2021). **Describe the bug** The 2FA name and email address in the mobile app (Google Auth) does not use the correct email address for user roles where 2FA is mandatory. The account is showing "<name>(guest@example.com)" where the name is correct, but the user email address is not used. **Steps To Reproduce** Steps to reproduce the behavior: 1. Create new account with an assigned user role that requires 2FA 2. Login with link from email 3. Add password 4. Add 2FA with Mobile app (google auth) 5. 6 digit code is provided with name: guest@example.com in mobile phone. **Expected behavior** User email address should be used. This is the case when the same user reconfigures the 2FA from their profile settings. **Screenshots** N/A **Your Configuration (please complete the following information):** Docker image: ghcr.io/linuxserver/bookstack BookStack v21.08.5
OVERLORD added the 🐛 Bug🏭 Back-End labels 2026-02-05 04:06:48 +03:00
Author
Owner

@ssddanbrown commented on GitHub (Oct 12, 2021):

Thanks for reporting @larciere. Have assigned to be addressed for the next patch release.

For reference: 8565187138/app/Auth/Access/Mfa/TotpService.php (L43)

@ssddanbrown commented on GitHub (Oct 12, 2021): Thanks for reporting @larciere. Have assigned to be addressed for the next patch release. For reference: https://github.com/BookStackApp/BookStack/blob/85651871388f2051cc7ad1279f6aeeff8d820848/app/Auth/Access/Mfa/TotpService.php#L43
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#2426