TFA fails with CloudFront CDN for one user alone

Hi,

Please describe the symptoms of the failure…. all you’ve said above about the actual symptoms experienced is ‘no longer works’ and ‘is broken’, which is not enough to respond to.

David

Depending on that, the next thing to check might be the network communications – look in your browser’s developer tools to see what is sent and received during the login process.

Sorry for the lack of details. The problem resolved itself and I will document here the precise things that I did, although it is mysterious to me why it resolved itself.

Note that every attempt that I describe below was in its own protected window in two different browsers (Chrome’s incognito, Safari’s private window) so that there is no sharing of the cache. I also tried swapping out the browsers with no difference.

First, when it is broken, which happens when the same user visits https://www.thekokuin.com/wp-admin. I am presented first with the option to login with WordPress.com or by providing a username and password. I choose the latter. I am then presented with a screen asking for my “One Time Password (i.e. 2FA)”. When I enter the code generated by Google Authenticator on my phone, I receive a message that says, “Error: The one-time password (TFA code) you entered was incorrect.”

Second, the behavior when things are fine and I can login by visiting https://thekokuin.com/wp-admin. At the login page, I choose to go with username and password instead of WordPress.com. Then, I am asked for the TFA code that I find from my phone’s Google Authenticator and enter. This takes me to the admin screen, as it should.

If I go to a new screen and try to access www. I get the same message that the TFA was incorrect. So, the order in which I try the two did not matter.

Now for what I did next, which appears to have resolved the issue.

To ensure that I am not inducing errors in typing the TFA code, I opened two incognito windows side-by-side (in two different browsers) and tried the two URLs together. So, I used the same TFA code in both of them by being fast enough. Now both of them worked fine and let me in. After this, when I tried each method individually in different browsers (www. or naked domain), both worked fine. The problem appears to have resolved itself!

Ok – glad it’s now working. If it stops again, then please open a new topic, and use the network tools in the web browser to analyse what is sent + received in the TFA conversation.