Heads up that we’ve bumped the UI up to 0.18.2-rc.1, which should resolve the current exploit that was seen on lemmy.world.
We’ve also logged out all currently logged in users as part of it, so you’ll need to login again.
I went looking to re-attempt 2FA setup. After enabling it in the options, the link that for 0.18.0 would trigger an event to add it to AndOTP (instead of just providing the secret) isn’t showing up at all. (If that makes any sense in my current decaffeinated state)
FYI, andOTP is no longer maintained, so I’d recommend switching to an alternative and there are many options. My transition to Aegis was very smooth.
I’ll take a look in a bit but might be a new bug.
Edit: I can see the link just fine, even without deactivating it first. Can you try clearing your browser cache?
The link starts with otpauth://, which will likely do nothing on desktop. Either click on it from a mobile device, or on desktop you can use an addon like Offline QR Code Generator (Firefox), then right-click the link and select QR code from link. This will show a QR code you’ll be able to enroll in any TOTP app. Hopefully they’ll add an option to display a QR code when using the desktop interface in newer versions of Lemmy.
Can I copy the link it generates and put it directly into my app that handles 2FA? (1password). Thought about trying it, but I didn’t see any recovery codes and am not keen on getting locked out.
