View Issue Detail

ID	Project	Category	Submitted / Last Updated
02163	UserSpice	Triage	2025-08-12 19:32:57 / 2025-08-15 10:29:42
Reported	Marc J	Resolved By	Dan Hoover
Priority	none	Reported	5.9.3
Status	resolved fixed	Resolution Version and Commit	5.9.4
Summary	TOTP can't be skipped for cookied logins - they're treated as password logins
Description	Discord link: https://discord.com/channels/366617046995304448/573110025321709568/1404907473164566610 So... I have TOTP enabled. And also "remember be" which seems to work. But.... after a time (shorter than the cookie lifetime) when visiting the site I get redirected to the TOTP entry page rather than being logged in automatically. The navbar looks like I'm logged in but it doesn't let me do anything other than enter TOTP. So it looks like the lifetime of the TOTP auth isn't the same as the password cookied? Ideally under the "TOTP Enforcement by Login Method" there could be an entry "Cookied login" which would be treated differently to a normal password login, so that OTP could be skipped for these, if desired?