Trying to add 2FA for an account without an authenticated email produces incorrect error message

(#2762) Bug Fixed security

Observed behaviour

error message with wrong description (this likely exists in other places as well, but this is the one i found)

Reproduction steps

  1. create an account without verifying the email
  2. add an authenticator app
  3. enter your password

Build information

Canary 811 (7ae3810), Windows NT 10.0 (x64), Chrome 148.0.0.0, Locale en-US

Platform

Web

Details

Expected behaviour error message with correct description
  • image.png

    image.png

    968×672 | 60 kB

  1. Rex changed the status from Needs triage to Fixed

1 comment

Sign in with Fluxer to comment and vote.
Comment by Jiralite
JiraliteMod 1 vote
Can reproduce Confirmed bug. Can happen in other places wherever EMAIL_VERIFICATION_REQUIRED is