0
[email protected] created
Issue
2FA "Remember this browser" feature not working - users must enter 2FA code daily despite checking "Remember this browser".
Symptoms
- Users check "Remember this browser" during 2FA login
- Next day: still prompted for 2FA code
- 2FA remember functionality works for 1 day, then fails
Probable Issue Found
Problem: Frontend stored 1-year expiration, backend created 1-day tokens Evidence:
SYNAPTIX_WORKFORCE/abpzerotemplate_local_storage/TwoFactorRememberClientToken
{
"token": "ey.....................",
"expireDate": "2026-10-02T11:59:14.692Z"
}
- JWT
expclaim: 24 hours (2025-10-03) - Frontend
expireDate: 1 year (2026-10-02)
Potentially related issues
- https://github.com/aspnetzero/aspnet-zero-core/issues/5430
- https://support.aspnetzero.com/QA/Questions/12188/Remember-browser-for-2FA#answer-e507d616-fd12-661e-90ed-3a1663942ea4
ASP.NET Zero Version: 13.3.0
Markdown is supported
Copy & paste or drag & drop images (max 30 MB per image)
1 Answer(s)
-
0
Hi @benjamin.edinger
Thank you for your feedback. We have created an issue for this, and you can follow the progress here. The problem is that the TwoFactorRememberClientToken is created with the same duration as the default AccessTokenExpiration. A more detailed explanation will be shared with you once the pull request is opened.
Thank you
Markdown is supportedCopy & paste or drag & drop images (max 30 MB per image)
