Issue with connexion module

Hi, i think i found a bug related to the multifactor authentication and the CB system plugin (if i disable the plugin the system behaves like it should). I've tested and confirmed this on two website. The original one with the problem. And a clean J4 install with CB on it. 

If you need any more information just let me know. 

Kind regards,
Tom

System information
Joomla 4.3.2
Community Builder 2.8.0+build.2023.05.26.14.42.43.3634ccdb3
PHP 8.1.19
MariaDB 10.4.28

Steps to reproduce
1. Setup Multifactor Authentication for your user
2. Install CB
3. Login through front-end with Multifactor Authentication enabled.
4. Try to logout when you see the captive login screen (red button Logout)

Expected behaviour
returned to homepage with logout message on screen.

Actual behaviour
page just reloads. 

Url where problem exists
example.com/index.php?option=com_users&view=captive&Itemid=101

CB doesn't control the redirect behavior of the MFA plugin. Unpublish CBs system plugin in Extensions > Plugins then retry using Joomla's login module and see if the issue persists.

HI Krileon,

I am not talking about the redirect behavior. I'm talking about the user.logout task url behavior that is being changed by the CB system plugin.

The problem is gone when i disable the CB system plugin (I already mentioned that in my original post).

It's not related to what module is used because it happens after you have left the module and click on a button at the captive login page.

The link on that button uses the com_users task user.logout. Something CB system plugin is triggered by. 

The url that doesn't seem to work anymore when cb plugin is active is this one: example.com/index.php?option=com_users&task=user.logout&***TOKEN***=1&Itemid=101

Ok, sounds like the MFA plugin won't allow access to anywhere other than Joomla's user component then. Will need to change the backdoor protection in our system plugin to try and allow for access to the user component during MFA. Have created a bug ticket for further investigation.

forge.joomlapolis.com/issues/9188

Perfect thanks 👍

Hi Krileon

We haven't heard from you regarding our problem with the authentication module. Do you have a solution and when do you think you'll be able to fix it?