{"action":"created","issue":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/12458","repository_url":"https://api.github.com/repos/joomla/joomla-cms","labels_url":"https://api.github.com/repos/joomla/joomla-cms/issues/12458/labels{/name}","comments_url":"https://api.github.com/repos/joomla/joomla-cms/issues/12458/comments","events_url":"https://api.github.com/repos/joomla/joomla-cms/issues/12458/events","html_url":"https://github.com/joomla/joomla-cms/issues/12458","id":183745594,"number":12458,"title":"\"Must match character set\" message when logging in with 2FA enabled","user":{"login":"mbabker","id":368545,"avatar_url":"https://avatars.githubusercontent.com/u/368545?v=3","gravatar_id":"","url":"https://api.github.com/users/mbabker","html_url":"https://github.com/mbabker","followers_url":"https://api.github.com/users/mbabker/followers","following_url":"https://api.github.com/users/mbabker/following{/other_user}","gists_url":"https://api.github.com/users/mbabker/gists{/gist_id}","starred_url":"https://api.github.com/users/mbabker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mbabker/subscriptions","organizations_url":"https://api.github.com/users/mbabker/orgs","repos_url":"https://api.github.com/users/mbabker/repos","events_url":"https://api.github.com/users/mbabker/events{/privacy}","received_events_url":"https://api.github.com/users/mbabker/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/joomla/joomla-cms/labels/No%20Code%20Attached%20Yet","name":"No Code Attached Yet","color":"ededed"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":62,"created_at":"2016-10-18T17:01:11Z","updated_at":"2016-10-19T18:02:41Z","closed_at":null,"body":"### Steps to reproduce the issue\r\n\r\nLog into a site after updating to 3.6.3.\r\n\r\n### Expected result\r\n\r\nSuccessful login\r\n\r\n### Actual result\r\n\r\nError page with \"Must match character set\"\r\n\r\n### System information (as much as possible)\r\n\r\nHit this on `www.joomla.org`, `downloads.joomla.org`, `developer.joomla.org`, and my own website (Rochen & SiteGround hosting platforms, PHP 5.6 and 7.0).\r\n\r\n### Additional comments\r\n\r\nOn each of the four sites listed above, my accounts have 2FA enabled.  I tested on another site where I do not have this feature enabled and successfully authenticated."},"comment":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/comments/254892755","html_url":"https://github.com/joomla/joomla-cms/issues/12458#issuecomment-254892755","issue_url":"https://api.github.com/repos/joomla/joomla-cms/issues/12458","id":254892755,"user":{"login":"DarkCloud14","id":314477,"avatar_url":"https://avatars.githubusercontent.com/u/314477?v=3","gravatar_id":"","url":"https://api.github.com/users/DarkCloud14","html_url":"https://github.com/DarkCloud14","followers_url":"https://api.github.com/users/DarkCloud14/followers","following_url":"https://api.github.com/users/DarkCloud14/following{/other_user}","gists_url":"https://api.github.com/users/DarkCloud14/gists{/gist_id}","starred_url":"https://api.github.com/users/DarkCloud14/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DarkCloud14/subscriptions","organizations_url":"https://api.github.com/users/DarkCloud14/orgs","repos_url":"https://api.github.com/users/DarkCloud14/repos","events_url":"https://api.github.com/users/DarkCloud14/events{/privacy}","received_events_url":"https://api.github.com/users/DarkCloud14/received_events","type":"User","site_admin":false},"created_at":"2016-10-19T18:02:41Z","updated_at":"2016-10-19T18:02:41Z","body":"I apologize in advance as this comment isn't helpful for solving the original issue but maybe you can save some code + possible errors and drop the encryption/decryption of TFA config in future releases as @nikosdion already said/proposed.\r\n\r\nUnless there is a good reason to keep TFA config encryption I fully agree with @nikosdion as it's useless to encrypt something someone else could get access to or override if he can run arbitrary PHP or SQL code on the affected site."}}
{"actor":{"display_login":"DarkCloud14"}}