Skip to content

Access to help is not available during login during 2FA grace period

Summary

User is not able to get help on "Register Two-Factor Authentication App" page (https://gitlab.com/profile/two_factor_auth).

Steps to reproduce

  • add user with 2FA disabled to group requiring 2FA
  • login with that user with password and page "Register Two-Factor Authentication App" is presented
  • on that page click on documentation link (help)
  • instead of help, user is redirected back to the "Register Two-Factor Authentication App" page
  • regardless whether user registers or chooses to skip (if still possible), further redirection does not remember click on the help page, so unless user had copied the link manually, he/she does not know where to look for help

What is the current bug behavior?

User cannot leave the "Register Two-Factor Authentication App" page, thus cannot see help page.

What is the expected correct behavior?

User can see help page. That page is available also without authentication.

Relevant logs and/or screenshots

image

Possible fixes

I don't know where this code is located.