Resolved Multi-Factor Authentication (MFA) - New Accounts tab - JS error showing blank page

Alban Staehli · Oct 31, 2024

Username:

TITLE

Multi-Factor Authentication (MFA) - New Accounts tab - JS error showing blank page

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE

AlmaLinux 8.10 (Cerulean Leopard), Plesk Obsidian 18.0.65 Web Host Edition, MFA Extension 1.1.0-1735

PROBLEM DESCRIPTION

While attempting to try out the new Accounts tab for the Multi-Factor Authentication (MFA), each time I click on it to access the tab content, the browser catches a JS error and the page remains blank.
See attachment. I tried to refresh browser cache, did not help.

STEPS TO REPRODUCE

Open the Multi-Factor Authentication (MFA), click on the Accounts tab.

ACTUAL RESULT

Shows a blank page and throws a JS error in the browser Dev console.
See error below:

Code:

react-dom.production.min.js:188 TypeError: e.filter is not a function
    at UserList.tsx:44:18
    at Object.useMemo (react-dom.production.min.js:177:189)
    at react.production.min.js:26:48
    at Ot (UserList.tsx:43:25)
    at ml (react-dom.production.min.js:160:137)
    at ki (react-dom.production.min.js:289:337)
    at xc (react-dom.production.min.js:279:389)
    at vc (react-dom.production.min.js:279:320)
    at gc (react-dom.production.min.js:279:180)
    at ac (react-dom.production.min.js:270:88)

Code:

react-dom.production.min.js:127 Uncaught TypeError: e.filter is not a function
    at UserList.tsx:44:18
    at Object.useMemo (react-dom.production.min.js:177:189)
    at react.production.min.js:26:48
    at Ot (UserList.tsx:43:25)
    at ml (react-dom.production.min.js:160:137)
    at ki (react-dom.production.min.js:289:337)
    at xc (react-dom.production.min.js:279:389)
    at vc (react-dom.production.min.js:279:320)
    at gc (react-dom.production.min.js:279:180)
    at ac (react-dom.production.min.js:270:88)

EXPECTED RESULT

Shows the list of Accounts (I guess, since it's a new feature)

ANY ADDITIONAL INFORMATION

I observed that the "Accounts" tab only shows up after 2-3 seconds after accessing the MFA extension.

YOUR EXPECTATIONS FROM PLESK SERVICE TEAM

Help with sorting out

Sebahat.hadzhi · Nov 1, 2024

Thank you for the report, @Alban Staehli. I tested and inspected the "Accounts" tab in the MFA extension 1.1.0-1735 on Chrome, Edge, and Firefox with Alma Linux 8.10/9.4 / Ubuntu 22.04 and Plesk 18.0.65. Unfortunately, I was unable to reproduce the behavior or the error in the console log. Could you please try accessing the tab using another browser or clear the cache of the current one?

Alban Staehli · Nov 4, 2024

Just tried @Sebahat.hadzhi with Edge, same error.

Code:

react-dom.production.min.js:188  TypeError: e.filter is not a function
    at main.js?&18.0.65:1:39030
    at Object.useMemo (react-dom.production.min.js:177:189)
    at t.useMemo (react.production.min.js:26:48)
    at Ot (main.js?&18.0.65:1:39022)
    at ml (react-dom.production.min.js:160:137)
    at ki (react-dom.production.min.js:289:337)
    at xc (react-dom.production.min.js:279:389)
    at vc (react-dom.production.min.js:279:320)
    at gc (react-dom.production.min.js:279:180)
    at ac (react-dom.production.min.js:270:88)

Code:

react-dom.production.min.js:127  Uncaught TypeError: e.filter is not a function
    at main.js?&18.0.65:1:39030
    at Object.useMemo (react-dom.production.min.js:177:189)
    at t.useMemo (react.production.min.js:26:48)
    at Ot (main.js?&18.0.65:1:39022)
    at ml (react-dom.production.min.js:160:137)
    at ki (react-dom.production.min.js:289:337)
    at xc (react-dom.production.min.js:279:389)
    at vc (react-dom.production.min.js:279:320)
    at gc (react-dom.production.min.js:279:180)
    at ac (react-dom.production.min.js:270:88)

Alban Staehli · Nov 4, 2024

Just to add: Google Authenticator 1.5.6-3176 extension is still installed, which is disabled since MFA was delivered earlier this year.

Sebahat.hadzhi · Nov 5, 2024

Thank you for your update. Unfortunately, I was unable to reproduce the issue even with Google Authenticator present on the server. If you have the option, I would recommend to open a ticket with Plesk support for an investigation of the issue on your server.

Will-NYESDigital · Nov 6, 2024

I can confirm we are seeing the same issue on the same config as Alban. Having gone to test the new accounts page it is blank.

Sebahat.hadzhi · Nov 6, 2024

@Will-NYESDigital, if you have the option to open a support ticket, please do. Given that, at this point, we are unable to reproduce the issue, it is quite difficult to point out what exactly the case is on your end.

Hangover2 · Nov 7, 2024

We can also confirm the bug. The issue seems to be related to the number of accounts.

One of our servers, with 157 accounts, works like a charm.

Another one, with 464 accounts, triggers the mentioned error.

I think @Alban Staehli has a similar number of accounts, as we also experience a 2-3 second delay after accessing the MFA extension before the "Accounts" tab appears on the affected server. You can check the number of accounts in the psa database:

SQL:

SELECT COUNT(*) FROM `psa`.`smb_users`

Sebahat.hadzhi · Nov 7, 2024

Thanks for the details, now we have some ground to start the investigation from. I will discuss the case with our team and will update you with more details shortly.

Sebahat.hadzhi · Nov 7, 2024

@Hangover2, the odd thing is that the extension was tested with double the number of users you are reporting before release and no performance issues were observed. Anyhow, I escalated the case for further review by our team and hopefully they will be able to find the culprit.

Hangover2 · Nov 7, 2024

@Sebahat.hadzhi

We did investigate the problem further.

The problematic request is:

Normally it gives back all user. But on the problematic server it redirects back to the dashboard. This causes the delay of several seconds.
In our case the error message on the dashboard is:
Error: Can not find domain by id -1

Here is the panel error log:

Code:

pm_Exception: Can not find domain by id -1
file: /opt/psa/admin/plib/pm/Domain.php
line: 33
code: 0
trace: #0 /opt/psa/admin/plib/pm/Domain.php(47): pm_Domain->__construct(integer '-1')
#1 /opt/psa/admin/plib/modules/mfa/vendor/plesk/typedplesksdk/src/DomainFactory.php(18): pm_Domain::getByDomainId(integer '-1')
#2 /opt/psa/admin/plib/modules/mfa/library/Helper/UserHelper.php(182): Plesk\SDK\TypedPleskSdk\DomainFactory->getByDomainId(integer '-1')
#3 /opt/psa/admin/plib/modules/mfa/library/Helper/UserHelper.php(101): PleskExt\Mfa\Helper\UserHelper::getMailUserLoginInfo(array)
#4 /opt/psa/admin/plib/modules/mfa/controllers/UsersController.php(45): PleskExt\Mfa\Helper\UserHelper::getAllUserLogins(boolean true)
#5 /opt/psa/admin/plib/vendor/plesk/zf1/library/Zend/Controller/Action.php(516): UsersController->indexAction()
#6 /opt/psa/admin/plib/vendor/plesk/zf1/library/Zend/Controller/Dispatcher/Standard.php(308): Zend_Controller_Action->dispatch(string 'indexAction')
#7 /opt/psa/admin/plib/vendor/plesk/zf1/library/Zend/Controller/Front.php(954): Zend_Controller_Dispatcher_Standard->dispatch(object of type Zend_Controller_Request_Http, object of type Zend_Controller_Response_Http)
#8 /opt/psa/admin/plib/pm/Application.php(91): Zend_Controller_Front->dispatch()
#9 /opt/psa/admin/htdocs/modules/mfa/index.php(4): pm_Application->run()

The PHP file is encrypted, so now it is your turn. Happy debugging

.

Sebahat.hadzhi · Nov 9, 2024

Hello, everyone. Could someone please run the plesk repair db -v -n command and provide the output either in a private conversation or in this thread? Thanks in advance for your cooperation.

Hangover2 · Nov 9, 2024

Hello @Sebahat.hadzhi , this was also our first idea.

Code:

Error messages: 0; Warnings: 0; Errors resolved: 0

Hangover2 · Nov 9, 2024

We dug deeper and were able to find the root cause of the issue.

Even though the Plesk repair tool for the server does not show any problems with the Plesk database, there is one problematic user on the server who caused the issue.

First of all, this user has a value of -1 for `subscriptionDomainId` in `psa`.`smb_users` .

Upon further inspection, we found that this user has a webmaster role with access to a subscription that no longer exists.

After deleting that user, everything works like a charm again.

Sebahat.hadzhi · Nov 10, 2024

I am glad to hear you were able to find the culprit of the issue. Thank you for providing the details, I am sure that will be of a great help to our team. I passed the information so they can continue investigating why would this cause the abnormal behavior in the MFA extension and possibly correct it.

Sebahat.hadzhi · Nov 12, 2024

Hello, everyone. Thank you all for reporting the issue. The same was, however, not identified as product bug. According to our team it is related to a local misconfiguration. Kindly check if there is no user issue present on the server similar to the one reported by @Hangover2.

Hangover2 · Nov 12, 2024

@Sebahat.hadzhi Local misconfiguration?

Actually, this is a bug that can be reproduced quite easily:

1. Add a subscription to a customer.
2. Create a new user account under the customer that only has access to the newly created subscription.
3. Delete the newly created subscription.
4. Open the accounts tab of the "Multi-Factor Authentication (MFA)" extension.

I wouldn’t say that this is a local misconfiguration; it’s a software bug in Plesk. You can’t expect clients to know that the "lost" user must be deleted first in order to access the plugin again without errors.

Sebahat.hadzhi · Nov 12, 2024

@Hangover2, to be more precise, the issue results from a database inconsistency. We are currently further discussing how we can improve the MFA extension so it can help admins identify the culprit easier.

Martin Dias · Nov 12, 2024

Hello, thank you for the report and steps to reproduce

Bug reported under EXTPLESK-6144

W/A for now is to remove any users that do not have a subscription anymore.
To find them:

Code:

SELECT smb_users.contactName AS 'Leftover User', clients.pname AS 'Owner' FROM smb_users JOIN clients ON smb_users.ownerId = clients.id WHERE smb_users.subscriptionDomainId = -1;

(Owner in the output is the customer that created this user)

At this point, I cannot provide any estimate for the resolution. Thank you for your patience and understanding in the meantime.

Alban Staehli · Nov 13, 2024

Martin Dias said:
Hello, thank you for the report and steps to reproduce
Bug reported under EXTPLESK-6144

W/A for now is to remove any users that do not have a subscription anymore.
To find them:

Code:

SELECT smb_users.contactName AS 'Leftover User', clients.pname AS 'Owner' FROM smb_users JOIN clients ON smb_users.ownerId = clients.id WHERE smb_users.subscriptionDomainId = -1;

(Owner in the output is the customer that created this user)

At this point, I cannot provide any estimate for the resolution. Thank you for your patience and understanding in the meantime.

This works, thx!

Resolved Multi-Factor Authentication (MFA) - New Accounts tab - JS error showing blank page

Regular Pleskian

Community Manager

Regular Pleskian

Regular Pleskian

Community Manager

Regular Pleskian

Community Manager

Regular Pleskian

Community Manager

Community Manager

Regular Pleskian

Community Manager

Regular Pleskian

Regular Pleskian

Community Manager

Community Manager

Regular Pleskian

Community Manager

QA Engineer

Regular Pleskian