You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description
In general, the lifetime of the OTP tokens for them to be valid is 1 min.
it happens that the validation of the sunstone extends this time to 5min, this generates an error with its connection with the fireedge, since the fireedge, validates that the maximum time is 1 min and makes that the request that returns the JWT fails.
To Reproduce
A user to put the 2FA and log out.
When logging in again, do it with an expired token older than 1 min, the sunstone will allow it, it will log in, but the request made to the fireedge from the ruby will fail, this will make it try from the client (Browser) but it will also fail because the "token2FA" is not sent.
Expected behavior
it is not allowed to log in to Sunstone with tokens with life time longer than 1 min.
Details
Affected Component: [e.g. Sunstone]
Hypervisor: [e.g. KVM]
Version: [e.g. 5.4.12 or development]
Additional context
Add any other context about the problem here.
Progress Status
Code committed
Testing - QA
Documentation (Release notes - resolved issues, compatibility, known issues)
The text was updated successfully, but these errors were encountered:
Description
In general, the lifetime of the OTP tokens for them to be valid is 1 min.
it happens that the validation of the sunstone extends this time to 5min, this generates an error with its connection with the fireedge, since the fireedge, validates that the maximum time is 1 min and makes that the request that returns the JWT fails.
To Reproduce
A user to put the 2FA and log out.
When logging in again, do it with an expired token older than 1 min, the sunstone will allow it, it will log in, but the request made to the fireedge from the ruby will fail, this will make it try from the client (Browser) but it will also fail because the "token2FA" is not sent.
Expected behavior
it is not allowed to log in to Sunstone with tokens with life time longer than 1 min.
Details
Additional context
Add any other context about the problem here.
Progress Status
The text was updated successfully, but these errors were encountered: