Authentication Issues
Troubleshooting authentication problems.
Login Problems
Cannot Login
Check:
- Verify email and password are correct
- Check if account exists
- Verify signup is enabled (if creating new account)
- Check for rate limiting (5 attempts per 15 minutes)
- For MFA: verify/disable limited to 5 attempts per minute
MFA Issues
Problems:
- MFA code not working
- QR code not displaying
- Cannot disable MFA
Solutions:
- Verify time sync on device (TOTP requires accurate time)
- Check MFA secret is correct
- Ensure MFA is properly enabled after setup
- Contact admin if MFA needs to be reset (admin cannot disable user MFA)
- If using backup codes, dashes are optional (ABCD-EFGH can be typed as ABCDEFGH)
- If rate-limited, wait one minute and retry
Session Issues
Sessions Not Persisting
Check:
- Verify cookies are enabled
- Check
httpOnlycookie settings - Verify JWT token is being set
- Check browser console for errors
Logout Issues
Problems:
- Cannot logout
- Sessions not revoking
Solutions:
- Clear browser cookies
- Use "Logout All" option
- Check session management endpoint
Token Issues
Token Expired
Solutions:
- Login again to get new token
- Check token expiration settings
- Verify system time is correct
Invalid Token
Solutions:
- Clear cookies and login again
- Check JWT_SECRET is set correctly
- Verify token format
Related Topics
- Common Errors - General troubleshooting
- Authentication API - API endpoints
- Authentication Concepts - How auth works