upstream/icingaweb2
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2.git synced 2026-06-11 01:20:21 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Verify 2fa token properly

Browse source
This commit is contained in:
Johannes Rauh 2025-10-02 08:25:20 +02:00
parent 2471231d01
commit 3cc2bdc229
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
application/forms/Authentication/Challenge2FAForm.php
View file

@ -44,10 +44,9 @@ class Challenge2FAForm extends LoginForm
public function onSuccess()
{
// TODO: Implement proper 2FA code validation
$user = Auth::getInstance()->getUser();
$totp = IcingaTotp::loadFromDb($this->getDb(), $user->getUsername());
if ($totp->verify($_POST['token'])) {
if ($this->getElement('token') && $totp->verify($this->getValue('token'))) {
$auth = Auth::getInstance();
$user = $auth->getUser();
$user->setTwoFactorSuccessful(true);