cannot log into feedback site after migrating passkey

(#4574) Bug Open: Needs triage api feedback-site migration security

Reproduction steps

-1. have a passkey on your account. moreover, make sure this is the only "second" factor attached to that account.
  1. open web.fluxer.app as normal today, migrate to the new fluxer.com app domain, and also migrate your passkey
    • the passkey is now bound to fluxer.com
  2. get mysteriously logged out of feedback.fluxer.com (or log out manually)
  3. try to log in to feedback.fluxer.com

Expected behaviour

i should be presented with a login prompt that accepts a fluxer.com passkey

Actual behaviour

i am presented with a login prompt that does not accept my fluxer.com passkey. i am therefore unable to log into the feedback site, and as such, it is entirely impossible to report this bug.

Build information

Fluxer Feedback 2026.1029.140415, Firefox 157 on Linux

Platform

Web, API, feedback.fluxer.com

1 comment

Sign in with Fluxer to comment and vote.
Comment by sodiboo
sodiboo OP1 vote
also note that logging in normally does work. my passkey did migrate successfully, it does work when i try to log into the web app directly, without initiating the login from the feedback site. (i had tested this by logging out and back in, which i did successfully on fluxer.com, and perhaps that's why my feedback site session was invalidated, leading me to discover this)