Skip to content

2FA.directory polluted by selfho.st call #495

@shielddz

Description

@shielddz

Version

5.6.0

What happened?

Issue encountered while running on docker. I didn't test any other running methods.

Steps to reproduce:

Edit any 2fa entry:
Use any name that is available in 2fa.directory, for example Gmail.
First fetch the icon using 2fa.directory => OK
Second fetch the icon using one of the two other providers => OK
Then try to fetch the icon using 2fa.directory => KO

Here's a demo of the bug:
https://github.com/user-attachments/assets/fa220f3c-d2c0-4a99-832a-d2aefde84187

Restarting my docker container fixes the issue, so maybe it's a shared variable that is not reset after using selfho.st ..

Error & Logs

Docker logs:

2fauth  | 172.18.0.2 - - [01/Aug/2025:15:18:09 +0000] "POST /api/v1/icons/default HTTP/1.1" 201 70 "https://auth.my-domain.com/account/32/edit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
2fauth  | 172.18.0.2 - - [01/Aug/2025:15:18:09 +0000] "GET /storage/icons/rMX9dtxMZm8B2o8UFyYxPnZhy4L9Zuy583lwDaWa.svg HTTP/1.1" 200 549 "https://auth.my-domain.com/account/32/edit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
2fauth  | 172.18.0.2 - - [01/Aug/2025:15:18:26 +0000] "DELETE /api/v1/icons/rMX9dtxMZm8B2o8UFyYxPnZhy4L9Zuy583lwDaWa.svg HTTP/1.1" 204 0 "https://auth.my-domain.com/account/32/edit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
2fauth  | 172.18.0.2 - - [01/Aug/2025:15:18:30 +0000] "POST /api/v1/icons/default HTTP/1.1" 201 70 "https://auth.my-domain.com/account/32/edit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
2fauth  | 172.18.0.2 - - [01/Aug/2025:15:18:30 +0000] "GET /storage/icons/7eb6d2FWnUmZQ0ttrc8XsE4GDp3ESpp4ZChVQa09.svg HTTP/1.1" 200 605 "https://auth.my-domain.com/account/32/edit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
2fauth  | 172.18.0.2 - - [01/Aug/2025:15:18:31 +0000] "GET /api/v1/twofaccounts?ids=1,2,3,4,5,6,7,8,9,10,11,12,13,15,16,17,18,19,20,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42&withOtp=1 HTTP/1.1" 200 11325 "https://auth.my-domain.com/accounts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
2fauth  | 172.18.0.2 - - [01/Aug/2025:15:18:32 +0000] "DELETE /api/v1/icons/7eb6d2FWnUmZQ0ttrc8XsE4GDp3ESpp4ZChVQa09.svg HTTP/1.1" 204 0 "https://auth.my-domain.com/account/32/edit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
2fauth  | 172.18.0.2 - - [01/Aug/2025:15:18:35 +0000] "POST /api/v1/icons/default HTTP/1.1" 422 111 "https://auth.my-domain.com/account/32/edit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"

Configuration

I'm using the standard provided docker-compose.yaml file

Containerization

  • Docker

Integration

No response

Additional information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingfixedThe issue is fixed (in a coming release)

    Projects

    Status

    Released

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions