2fa – nonce verification failing & Invalid API request

  • Resolved cycas

    (@cycas)


    1 year, 5 months ago

    Hi! I have 2FA enabled through Defender, using Google Authenticator as the default and email as the backup. This works fine for me.

    However, the other admin user who does most of the day to day work on the site reports that when he tries to log in with Google Authenticator, he gets nonce verification failing, and when he tries to log in with email, he gets an Invalid API request error.

    I am scratching my head as to how to solve this for him when I can’t actually see the problem myself. I thought of trying a different authentication mechanism, but since email is also glitching for him, it doesn’t seem likely to be that issue. Any ideas very welcome!

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support Patrick – WPMU DEV Support

    (@wpmudevsupport12)

    Hi @cycas

    Sorry to hear you are having this issue.

    When we can’t replicate the issue it is always hard to troubleshoot, but we can try to run some tests and trying to find out why it is happening.

    As you said it happens with a specific admin only we can start from there.

    If you create a new temporary admin user and give the credentials to whoever can replicate the problem, is he still able to replicate it? Then using the same credentials try to replicate the problem as well.

    It would test any possible browser problem.
    Let us know the result you got.
    Best Regards
    Patrick Freitas

    Thread Starter cycas

    (@cycas)

    Thank you! Of course as soon as I went back to the other admin to try out that suggestion, it all started working again perfectly on his account too.

    I shall definitely try setting up another account for testing on his machines if the problem recurs though, that is an approach I hadn’t thought of.

    Thread Starter cycas

    (@cycas)

    The issue returned for the other admin: I still can’t see it.

    We tried setting up a different account for him, but he still got nonce verification failing on phone login and Invalid API request error on the backup email.

    He tried switching browser from Chrome to Edge, and that worked for a bit, until the error returned. He was then able to log in if he cleared his browser cache. He’s only using one machine for this. Surely browser cache shouldn’t stop him logging in?

    Plugin Support Nebu John – WPMU DEV Support

    (@wpmudevsupport14)

    Hi @cycas,

    I suspect this is a device-specific issue. Can you please ask them to check this using a different device and let us know if they still notice the issue?

    Kind Regards,
    Nebu John

    Thread Starter cycas

    (@cycas)

    Will do, thanks for the reply!

    Plugin Support Patrick – WPMU DEV Support

    (@wpmudevsupport12)

    Hi @cycas

    I hope you are doing well and safe!

    We haven’t heard from you in a while, I’ll mark this thread as resolved.

    Feel free to let us know if you have any additional questions or problems.

    Best Regards
    Patrick Freitas

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘2fa – nonce verification failing & Invalid API request’ is closed to new replies.