2FA Email not sent after IP change in same session

[checkmeck]

Hi,
I recently encountered a bug related to Two-Factor Authentication (2FA) via email.

When logging into HumHub from a trusted network and then changing the IP address afterward (same session) (for example, by enabling a VPN), I am correctly prompted to enter the 2FA code that should be sent via email.

However, in this scenario, the email with the code is not being sent.

Can anyone confirm this issue or provide guidance on how to resolve it?

[gevorgmansuryan]

@luke- i was able to reproduce it, now new code will be send when ip address changes

[luke-]

@gevorgmansuryan Great! Can you please check the tests.

[gevorgmansuryan]

@luke- tests are ok now