Hi, I am trying to set up 2 factor login for the lucee dev website but keep getting the message “Invalid authentication code. Each code can only be used once.” I am using Google Authenticator. Maybe something with different timezones?
Does your app have a “Time correction for codes” option in its settings?
Yes, seems in sync, tried again, same error…
Unfortunately, we don’t control the MFA on the Discourse side… its an internal Discourse thing. I’ve upgraded the entire forum earlier today. It’s possible this might make a difference 
Thanks, don’t know what the problem is, tried Edge instead of Chrome, tried manual code instead of scanner, so for now no luck!
Anyone else had problems with 2FA? Or idea’s? This is what I checked:
- PC/Mobile same time
- Tried with Chrome/Edge
- Tried code scan and manually
- Time correction is not needed, says it’s synced
I have contacted Discourse support, this is what they told me:
“Unless your question is about a site that we host, you’re going to have to ask it in our public #support category. We don’t host the site at https://lucee.daemonite.io/. It sounds like it could be a server configuration issue that is preventing you from setting up 2FA. Have a look at Two factor auth consistently returns invalid authentication code.”
When was the last time you tried 2-factor? Funnily enough we did have to reset the NTP on the forum box a couple of weeks ago to fix an issues with backups. Perhaps that also fixed the 2FA issue you were experiencing.
Couple of hours ago I tried it again with the same error as result… Just tried the Microsoft Authentication app, also same error. It’s not a life threatening problem, but would be great to secure this account, hackers love developers accounts so would be nice to have some extra safety.
Tried it again with Google Authenticator, and now it works!
So… had to create another account because it’s not working again, this is really a shame…