2FA SSH recovery method no longer works correctly (BBMICROS-538)

XMLWordPrintable

    • 10
    • Severity 2 - Major
    • 1,042

      Issue Summary

      When attempting to use the SSH 2FA method, with the command below:

      ssh git@bitbucket.org recovery_codes
      

      The following error message is thrown:

      {"type": "error", "error": {"message": "You cannot administer personal accounts of other users."}}
      

      Or even, the request is successful but the recovery codes are missing in the response:

      Your single-use recovery codes are
      
      Once logged in, you should immediately visit
      https://bitbucket.org/account/user/git/two-step-verification/
      to add a new two-step device.
      Thank you for using Atlassian Bitbucket.
      

      Steps to Reproduce

      1. Set up an SSH key and 2FA on your account
      2. On your terminal, run the following command, as described here:
        ssh git@bitbucket.org recovery_codes
        

      Expected Results

      The recovery codes are correctly displayed on the terminal.

      Actual Results

      The following error is thrown:

      {"type": "error", "error": {"message": "You cannot administer personal accounts of other users."}}
      

      Or the Recovery Codes are missing in the response body;

      Workaround

      Currently, the only known workaround is to disable your account 2FA using the e-mail method described here, under "Disable two-step verification":
      https://support.atlassian.com/bitbucket-cloud/docs/enable-two-step-verification/

            Assignee:
            Unassigned
            Reporter:
            Leonardo M
            Votes:
            4 Vote for this issue
            Watchers:
            11 Start watching this issue

              Created:
              Updated:
              Resolved: