-
-
Notifications
You must be signed in to change notification settings - Fork 978
Open
Description
Hello.
I am developing a small PHP application that allows users to log in with Mastodon using OAuth.
The login flow works normally for accounts without two factor authentication:
- User clicks login
- Mastodon authorization page opens
- User approves the application
- User is redirected to my callback.php
- Login completes successfully
However when a user has 2FA enabled on their Mastodon account, the behavior changes.
The flow becomes:
- User approves the application
- Mastodon asks for the 2FA code
- User enters the code
- After successful verification the user is not redirected to my callback URL
Because of this the OAuth login process never finishes.
My question is:
Is there an additional step required in the OAuth flow when 2FA is enabled
or could this be a bug with the redirect after 2FA verification
Has anyone experienced this before?
Thank you.
auth_check.php
callback.php
login.php
mastodon_helpers.php
config.php
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels