starred/panel
1
0
Fork 0
mirror of https://github.com/pelican-dev/panel.git synced 2026-02-24 03:12:01 +03:00
Code Issues 42 Packages Projects Releases 12 Wiki Activity

Turnstile prevents submitting 2FA token #390

New Issue
Closed
opened 2026-02-04 17:50:27 +03:00 by OVERLORD · 4 comments
OVERLORD commented 2026-02-04 17:50:27 +03:00
Owner
Copy Link

Originally created by @J-Lassauw on GitHub (Jul 21, 2025).

Current Behavior

When a user tries to log in with Turnstile enabled, 2FA is not prompted until the capacha is passed. Once MFA is prompted the login enters an invalid state where the capacha token has already been validated and can't be re-used.

Image

Expected Behavior

The capacha should be reloaded when 2FA is active.

Steps to Reproduce

Enable capacha and attempt to log in with a 2FA enabled user.

Panel Version

1.0.0-beta23

Wings Version

1.0.0-beta15

Games and/or Eggs Affected

No response

Docker Image

No response

Error Logs

Is there an existing issue for this?

  • I have searched the existing issues before opening this issue.
  • I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server.
  • I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.
Originally created by @J-Lassauw on GitHub (Jul 21, 2025). ### Current Behavior When a user tries to log in with Turnstile enabled, 2FA is not prompted until the capacha is passed. Once MFA is prompted the login enters an invalid state where the capacha token has already been validated and can't be re-used. <img width="504" height="227" alt="Image" src="https://github.com/user-attachments/assets/3efbb570-66f5-4b4f-bc45-03f7e78b62df" /> ### Expected Behavior The capacha should be reloaded when 2FA is active. ### Steps to Reproduce Enable capacha and attempt to log in with a 2FA enabled user. ### Panel Version 1.0.0-beta23 ### Wings Version 1.0.0-beta15 ### Games and/or Eggs Affected _No response_ ### Docker Image _No response_ ### Error Logs ```bash ``` ### Is there an existing issue for this? - [x] I have searched the existing issues before opening this issue. - [x] I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server. - [x] I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.
OVERLORD commented 2026-02-04 17:50:39 +03:00
Author
Owner
Copy Link

@Boy132 commented on GitHub (Jul 21, 2025):

Could you please try the changes from https://github.com/pelican-dev/panel/compare/main...boy132/fix-2fa-with-captcha and see if that fixes the issue?

@Boy132 commented on GitHub (Jul 21, 2025): Could you please try the changes from https://github.com/pelican-dev/panel/compare/main...boy132/fix-2fa-with-captcha and see if that fixes the issue?
OVERLORD commented 2026-02-04 17:50:46 +03:00
Author
Owner
Copy Link

@J-Lassauw commented on GitHub (Jul 21, 2025):

Could you please try the changes from main...boy132/fix-2fa-with-captcha and see if that fixes the issue?

Tried this, no dice, I do get a 401 from challenges.cloudflare.com which could be interesting, and this does refresh the capacha UI and make me fill it in, maybe the form is still submitting the old one? I still get the same error visually from the screenshot.

@J-Lassauw commented on GitHub (Jul 21, 2025): > Could you please try the changes from [main...boy132/fix-2fa-with-captcha](https://github.com/pelican-dev/panel/compare/main...boy132/fix-2fa-with-captcha) and see if that fixes the issue? Tried this, no dice, I do get a 401 from challenges.cloudflare.com which could be interesting, and this does refresh the capacha UI and make me fill it in, maybe the form is still submitting the old one? I still get the same error visually from the screenshot.
OVERLORD commented 2026-02-04 17:50:56 +03:00
Author
Owner
Copy Link

@J-Lassauw commented on GitHub (Jul 22, 2025):

The above worked when patched in.

@J-Lassauw commented on GitHub (Jul 22, 2025): The above worked when patched in.
OVERLORD commented 2026-02-04 17:50:59 +03:00
Author
Owner
Copy Link

@rmartinoscar commented on GitHub (Sep 10, 2025):

Image Image

Still happening you are stuck on the verify your identity

@rmartinoscar commented on GitHub (Sep 10, 2025): <img width="413" height="484" alt="Image" src="https://github.com/user-attachments/assets/39d7f63a-4325-4829-897d-c0a07ed914d6" /> <img width="414" height="316" alt="Image" src="https://github.com/user-attachments/assets/7c7b3003-c7ff-4298-b804-33b3423747e5" /> Still happening you are stuck on the verify your identity
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
not confirmed
pull-request
Mirrored from GitHub Pull Request
 👑 sponsor
💰 fund
🔴 hard
🟡 medium
🟡 medium
🟡 medium
🟢 easy
🟢 easy
🟢 easy
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/panel#390
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?