Single POST auth with OTP no longer supported?

J

jhollowe

Member
Apr 22, 2020
15
6
8
28
Previously (in 7.x at least), you were able to include otp in a single request to /api2/json/access/ticket which would verify both the username/password and TOTP token and immediately provide a ticket and CSRF token. However, this appears to no longer work and requires the two-request flow the GUI uses involving the tfa-challenge.

Is the single-request TOTP purposefully no longer supported or would it be expected for this to still work and should have a bugzilla bug opened for this issue?

(see more discussion of this at proxmoxer/proxmoxer#156)
 
Is anyone able to confirm if a single request for the ticket is viable for users with TOTP enabled?
 
You must log in or register to reply here.
Top Bottom