| Catrope | |
| Sep 15 2025, 10:44 PM |
| F66026551: Screenshot 2025-09-17 at 00.08.50.png | |
| Sep 16 2025, 11:10 PM |
| F66025049: image.png | |
| Sep 15 2025, 10:44 PM |
| F66025043: image.png | |
| Sep 15 2025, 10:44 PM |
When you try to log in with WebAuthn, initially you see a form with a button to switch to TOTP, but that immediately gets overlaid with the browser dialog for using your passkey or security key:
And then if you cancel that, the whole form is replaced with an error message, which makes it impossible to actually switch to TOTP.
| Subject | Author | Repo | Branch | Lines +/- | |
|---|---|---|---|---|---|
| Don't remove the entire login form when WebAuthn fails | Catrope | mediawiki/extensions/WebAuthn | master | +8 -2 |
Change #1188865 had a related patch set uploaded (by Catrope; author: Catrope):
[mediawiki/extensions/WebAuthn@master] Don't remove the entire login form when WebAuthn fails
I concur this isn't completely ideal either, but definitely better than the previous almost dead end.
Change #1188865 merged by jenkins-bot:
[mediawiki/extensions/WebAuthn@master] Don't remove the entire login form when WebAuthn fails
T404773: Don't force reload to retry after WebAuthn failure is the follow on, to fix up the hack