Skip to content

Call RefreshSignIn after MFA is set up? #51

@DoxxableSetanta

Description

@DoxxableSetanta

Despite you having an AdditionalUserClaimsPrincipalFactory here, that checks if a user has 2FA enabled or not and adds the claim accordingly. You do not call RefreshSignIn at any point after enabling MFA. This will mean you do not have to have the instructions in your Layout.cshtml that tells the user to sign in and out again if they've activated MFA.

title="MFA is NOT enabled. This is required for the Admin Page. If you have activated MFA, then logout, login again.">

For example, this could go here

Should be noted this might not be the best solution as per this SO answer regarding the MFA claim

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions