1
0
mirror of https://github.com/bitwarden/server.git synced 2024-11-21 12:05:42 +01:00

validate authenticator on set instead of get

This commit is contained in:
Jake Fink 2024-07-17 16:33:51 -04:00
parent 8fafea6056
commit 7bf2084531
No known key found for this signature in database
GPG Key ID: FD482F8453480035

View File

@ -93,7 +93,7 @@ public class TwoFactorController : Controller
public async Task<TwoFactorAuthenticatorResponseModel> GetAuthenticator(
[FromBody] SecretVerificationRequestModel model)
{
var user = await CheckAsync(model, false, false);
var user = await CheckAsync(model, false);
var response = new TwoFactorAuthenticatorResponseModel(user);
return response;
}
@ -103,7 +103,7 @@ public class TwoFactorController : Controller
public async Task<TwoFactorAuthenticatorResponseModel> PutAuthenticator(
[FromBody] UpdateTwoFactorAuthenticatorRequestModel model)
{
var user = await CheckAsync(model, false);
var user = await CheckAsync(model, false, false);
model.ToUser(user);
if (!await _userManager.VerifyTwoFactorTokenAsync(user,