2FA with peeeringDB - password asked

[NocQIX]

ISSUE TYPE

Bug Report

OS

Ubuntu 24.04.3 LTS

VERSION

define( 'APPLICATION_VERSION', '7.0.1' );
define( 'APPLICATION_VERDATE', '2025090300' );

ENVIRONMENT

PHP 8.4.16 (cli) (built: Dec 18 2025 23:38:53) (NTS)
Copyright (c) The PHP Group
Built by Debian
Zend Engine v4.4.16, Copyright (c) Zend Technologies
    with Zend OPcache v8.4.16, Copyright (c), by Zend Technologies

CONFIGURATION

APP_DEBUG=false
APP_URL=https://ixpm.yow.canix.ca/
APP_TIMEZONE=UTC
APP_LOG=single
APP_NAME="CANIX YOW IXP Manager"
IXP_RESELLER_ENABLED=true
IXP_AS112_UI_ACTIVE=1
IXP_FE_FRONTEND_DISABLED_LOGO=false
GRAPHER_BACKENDS="mrtg|sflow|smokeping"
GRAPHER_BACKEND_MRTG_DBTYPE="rrd"
GRAPHER_BACKEND_MRTG_WORKDIR="/srv/mrtg"
GRAPHER_BACKEND_MRTG_LOGDIR="/srv/mrtg"
GRAPHER_BACKEND_SFLOW_ENABLED=true
GRAPHER_BACKEND_SFLOW_ROOT="/srv/rrd"
GRAPHER_BACKEND_SMOKEPING_ENABLED=true
GRAPHER_BACKEND_SMOKEPING_URL="http://10.200.0.25/smokeping"
GRAPHER_CACHE_ENABLED=true
CACHE_DRIVER=memcached
IXP_IRRDB_BGPQ3_PATH=/usr/bin/bgpq3
IXP_RPKI_RTR1_HOST=10.200.0.210
IXP_RPKI_RTR1_PORT=3323
IXP_RPKI_RTR2_HOST=10.200.0.208
IXP_RPKI_RTR2_PORT=3323
AUTH_PEERINGDB_ENABLED=true
PEERINGDB_OAUTH_CLIENT_ID="nop"
PEERINGDB_OAUTH_CLIENT_SECRET="nop"
PEERINGDB_OAUTH_REDIRECT="https://ixpm.yow.canix.ca/auth/login/peeringdb/callback"
IXP_FE_FRONTEND_DISABLED_FILTERED_PREFIXES=0
IXP_FE_FRONTEND_DISABLED_LOOKING_GLASS=0
IXP_FE_LOGIN_HISTORY_ENABLED=0
2FA_ENABLED=1

SUMMARY

When 2FA is enabled and we want to connect via PeeringDB for the first time, we need to set up the 2FA. However, above that there is a field to enter our password.

But the PeeringDB account does not have a password.

STEPS TO REPRODUCE

When connecting via PeeringDB for the first time and 2FA has not yet been configured for the account, we enter the 2FA code, then it asks for a password that we do not have.

EXPECTED RESULTS

There should not be a password option when I connect via PeeringDB at the 2FA step.
I should only have to enter the 2FA code, without a password.

ACTUAL RESULTS

There is a field to enter the account password.

IMPORTANCE

Customers who connect via PeeringDB using 2FA cannot access the portal because they are blocked at the password prompt, which they do not have.