Is "2FA token not provided" actually an error?

We set up monitoring for all of our services recently. This includes alerts when applications log errors.

We noticed the following error message coming up from time to time:

{"log":"[2022-02-08 09:41:41.405][error][ERROR] 2FA token not provided\n","stream":"stdout","time":"2022-02-08T09:41:41.405199993Z"}
{"log":"[2022-02-08 08:06:48.318][error][ERROR] 2FA token not provided\n","stream":"stdout","time":"2022-02-08T08:06:48.319067451Z"}
{"log":"[2022-02-07 14:26:22.730][error][ERROR] 2FA token not provided\n","stream":"stdout","time":"2022-02-07T14:26:22.731041467Z"}
{"log":"[2022-02-07 14:20:18.300][error][ERROR] 2FA token not provided\n","stream":"stdout","time":"2022-02-07T14:20:18.300254629Z"}
{"log":"[2022-02-07 13:06:10.604][error][ERROR] 2FA token not provided\n","stream":"stdout","time":"2022-02-07T13:06:10.605145212Z"}
{"log":"[2022-02-07 12:04:44.802][error][ERROR] 2FA token not provided\n","stream":"stdout","time":"2022-02-07T12:04:44.802560513Z"}

Now we are wondering if this is actually an error (which would indicate a misconfiguration on our side) or if this is caused when users are logging in without or with invalid 2FA tokens.

The relevant line of code seems to be src/api/identity.rs#L310 but I’m not enough of a Rust expert to fully grasp what is happening. :slight_smile:

Could you help me out and clarify what the error means and when it occurs?

Thank you in advance!
Niels