You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In our authentication system, we have 2 CAS servers (one for first-factor authentication, the other for MFA).
When the first factor is validated, CAS redirects to the CAS server dedicated to the second factor (with the ticket of the first CAS server in the URL), the Rocket.Chat application considers the authentication successful and avoids validating the MFA.
Describe the Bug
In our authentication system, we have 2 CAS servers (one for first-factor authentication, the other for MFA).
When the first factor is validated, CAS redirects to the CAS server dedicated to the second factor (with the ticket of the first CAS server in the URL), the Rocket.Chat application considers the authentication successful and avoids validating the MFA.
Rocket.Chat.ReactNative/app/views/AuthenticationWebView.tsx
Line 109 in 788cb8d
Video.mov
Steps to Reproduce
It is not possible to validate the second factor.
Expected Behavior
The Rocket.Chat mobile application should only close the AuthenticationWebView once you've arrived at the requested service.
Actual Behavior
The Rocket.Chat mobile application closes the AuthenticationWebView when a CAS ticket is found in the URL
Rocket.Chat.ReactNative/app/views/AuthenticationWebView.tsx
Line 109 in 788cb8d
Rocket.Chat Server Version
7.1.0
Rocket.Chat App Version
4.67.0.107747
Device Name
Apple iPad 9
OS Version
iPadOS 18.7.2
Additional Context
No response