Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cosmos Explorer error if login expires and MFA is required #1730

Open
chunderbolt opened this issue Jan 25, 2024 · 5 comments
Open

Cosmos Explorer error if login expires and MFA is required #1730

chunderbolt opened this issue Jan 25, 2024 · 5 comments

Comments

@chunderbolt
Copy link

chunderbolt commented Jan 25, 2024

If I've been logged into an account for long enough that I require re-authentication, Cosmos Explorer will be unable to deal with this.

Running after a weekend off, before being asked to do MFA auth anywhere else gives this error when I click sign-in:

image

The console shows a 400 Bad Request:

XHRPOST
https://login.microsoftonline.com/425a5546-5a6e-4f1b-ab62-23d91d07d893/oauth2/v2.0/token
[HTTP/1.1 400 Bad Request 117ms]

	
error	"invalid_grant"
error_description	"AADSTS50078: Presented multi-factor authentication has expired due to policies configured by your administrator, you must refresh your multi-factor authentication to access '<sub_id>'. Trace ID: 97c57a27-e2f6-4dde-82e1-d6870bd53600 Correlation ID: b833dfaa-44bd-42a2-9c7c-db92080afa48 Timestamp: 2024-01-29 09:46:19Z"
error_codes	[ 50078 ]
0	50078
timestamp	"2024-01-29 09:46:19Z"
trace_id	"97c57a27-e2f6-4dde-82e1-d6870bd53600"
correlation_id	"b833dfaa-44bd-42a2-9c7c-db92080afa48"
suberror	"basic_action"

If I'm using cosmos.azure.com instead, I (obviously) don't get any popups. The message is still in the console, and "Switch Directory" will reveal a blank side panel without either my home tenant or any alternative directories. "Select a Database Account" will not show subscription choices (or inform you that there are no subscriptions).

@HiddevH
Copy link

HiddevH commented Feb 9, 2024

Just to chime in, we are experiencing the same issue. After authentication expires, I experience the same. Re-logging is my current workaround.

@chandramohank
Copy link

I am also having same issue. Even relogging also does not work for me. Edge browser not even asking for the MFA ,

URL: https://cosmos.azure.com/?feature.enableAadDataPlane=true
Browser: Edge
Version: 121.0.2277.128

@chunderbolt
Copy link
Author

@chandramohank You can try clearing site data/cookies for azure.com - I believe that was the last workaround I used. Of course, it logs you out of portal.azure.com as well so it's a bit inconvenient.

@chandramohank
Copy link

As my organization has restriction to use Edge as only browser for the Azure portal. I have only the one option.
I tried clearing the browser cache. It did not worked for me. But after installing the .Net 6.0 run time version, looks like it started working. Not sure exactly it did the trick. That was the only change, I have made.

@chunderbolt
Copy link
Author

I think this may have been fixed by #1746, but I'll leave it open for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants