Unable to remove 2FA

Observed behaviour

The 2FA prompt appears twice for some reason. Additionally, the second prompt does not seem to accept the 2FA code so it is effectively not possible to remove 2FA through this method. Additionally, this seems to occur in a similar fashion on the mobile app. I'm not sure if there is a shared backend issue, or if both clients just happen to have the same 2FA bug built in. If it's a client-side issue please let me know and I'll toss another report into the mobile community.

Reproduction steps

Go to fluxer://settings/user?tab=account_security&section=security
Next to Authenticator App, click Disable
Enter 2FA TOTP code
Enter 2FA TOTP code again (??)

Build information

Canary Desktop 2026.811.124022, Web 2026.811.121845, Linux 7.1.6-201.fc44.x86_64 (x64), Electron 41.2.2, Chrome 146.0.7680.188, Node 24.14.1, Locale en-US

Platform

Linux

Details

Expected behaviour Step 4 shouldn't exist. The 2FA prompt should only appear once.