Merge pull request #5303 from 7heMech/fix-2fa-logout

Add guardrail to fix disabling 2fa
This commit is contained in:
jc21
2026-02-16 10:27:58 +10:00
committed by GitHub

View File

@@ -163,6 +163,9 @@ const internal2fa = {
const result = await verify({ const result = await verify({
token: code, token: code,
secret: auth.meta.totp_secret, secret: auth.meta.totp_secret,
guardrails: createGuardrails({
MIN_SECRET_BYTES: 10,
}),
}); });
if (!result.valid) { if (!result.valid) {