-
Notifications
You must be signed in to change notification settings - Fork 854
Block enabled 2fa in the UI without cookie consent #2035
Conversation
I tried out the code via scaffolding the fix into a 2.1 app and it seems fine: This broke a bunch of functional tests so we actually do have coverage, the tests now have some minimal coverage for enabling 2fa behavior with and without cookie consent now. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
But I'm not a UI expert...
What happens if the dev removed all the consent code? |
They would need to remove this as well I assume? Or does CanTrack cover that case? |
I don't know, that's what I'm asking. I would have hoped the check defaulted to true if there was no consent feature, but ... |
Are you telling me CanTrack returns false by default? @Tratcher any insight into the behavior? |
src/UI/Areas/Identity/Pages/V3/Account/Manage/TwoFactorAuthentication.cshtml
Outdated
Show resolved
Hide resolved
Updated to assume if no consent feature is there, that means we are good to go (and to allow 2fa) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just 1 tiny comment on something that was already there. Otherwise good.
Fix for #2034