Hello! I came across the following issue involving an error with the physical security key interface under the Profile page:
How to Reproduce Issue:
- Register new security key
- Rename the security key
- Delete the now-renamed security key
Expected Results
Page reloads with the security key removed
Actual Results:
Page returns an HTTP 400 Bad Request, page content is just 0, and the security key is still registered
Environment:
- WordPress 5.9.1
- PHP 8.1.3
- MySQL 8.0.26
- Two Factor 0.7.1
Additional Notes:
This issue does not occur if you rename the security key, refresh the page, and then delete it.