From 64189067cdda543153ce43f110ce7143f96491f6 Mon Sep 17 00:00:00 2001 From: Kyle Spearrin Date: Fri, 23 Jun 2017 10:46:04 -0400 Subject: [PATCH] handle two factor remember failed case --- src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs b/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs index 0a1d111185..836f1c7c9c 100644 --- a/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs +++ b/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs @@ -68,6 +68,13 @@ namespace Bit.Core.IdentityServer twoFactorProviderType, twoFactorRemember); return; } + + if(twoFactorRequest && twoFactorProviderType == TwoFactorProviderType.Remember) + { + await Task.Delay(2000); // Delay for brute force. + await BuildTwoFactorResultAsync(user, context); + return; + } } } }