Skip to content

MFA enrollment QR SVG lacks an accessible name (svg-img-alt) #10547

Open

Description

@duyemura

Description

The built-in pending setup-mfa authenticator flow renders its QR code as an SVG image without an accessible name. A real Chromium sign-in against a development instance reports axe svg-img-alt (serious) on svg[height="200"].

Reproduction

  1. Render the standard ClerkProvider and SignIn components in a React application.
  2. Require MFA for sign-in and sign in with an account that must complete the setup-mfa session task.
  3. Open the built-in authenticator enrollment screen and run axe on the displayed QR code.

Expected: the SVG image has an accessible name describing its purpose, localized with the rest of the enrollment UI. Actual: no accessible name is supplied, so the scan fails. No application DOM modification is involved.

This was reproduced in an application integration; a standalone public reproduction repository is not attached. The component source independently identifies the omission: QRCode.tsx at Clerk UI 1.42.0 passes the value and size to QRCodeSVG without a title or accessible-label property. Could the built-in component supply a localized accessible name?

Environment

  • @clerk/react 6.18.3; the live browser reports ClerkJS 6.41.0 and Clerk UI 1.42.0 through the public Clerk.version and Clerk.uiVersion fields. ClerkJS 6.42.0 was the initial source-review tag, not the observed hosted runtime.
  • React 19, Linux, Chromium driven by Playwright 1.64.0
  • Real development-instance password sign-in and pending MFA, not mocked provider responses

No account identifiers, credentials, QR contents or enrollment secrets are included. Exact-rule and broader QR/accessibility searches found no existing issue. No Clerk support contact was made as part of this report.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions