General Questions/New to Joomla! 5.x • Redirect loop when privacy consent expired and MFA enabled

Morning all,

Just posting this in case it affects anyone else...

A redirect loop occurs ("Too many redirects") when:

• logging into frontend,
  privacy consent expired, and
  MFA enabled on account logging in

Logging in to frontend should go to User Profile page to accept privacy consent but redirect loop occurs. User is actually logged in but can't do anything due to redirect loop/expired privacy consent.

Work around: Login to Admin and logout the logged in user, disable the account's MFA in admin, login to frontend using the account in question, accept privacy consent, logout of frontend, reset MFA on the account in Admin.

I suspect it will happen on other occasions, e.g. password resets, when the system redirects to User Profile page on login when user account has MFA enabled.

Reported on GitHub:
https://issues.joomla.org/tracker/joomla-cms/42783

Hope the workaround helps someone.

Statistics: Posted by JAVesey — Sun Feb 11, 2024 10:04 am

---