LobotomyLabs/classquiz-ai
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🚑 Fixed login allowing unverified accounts

Browse Source
This commit is contained in:
Mawoka
2023-08-01 21:32:04 +02:00
parent 6a277cdf9f
commit 051bceed8f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
classquiz/routers/login.py
+1 -1
View File
@@ -110,7 +110,7 @@ async def start_login(data: StartLoginInput):
step_2: set[StartLoginResponseTypes] = set() step_2: set[StartLoginResponseTypes] = set()
webauthn_data = None webauthn_data = None
webauthn_challenge = None webauthn_challenge = None
if user is None: if user is None or not user.verified:
step_1.add(StartLoginResponseTypes.PASSWORD) step_1.add(StartLoginResponseTypes.PASSWORD)
return StartLoginResponse(step_1=step_1, step_2=step_2, session_id=os.urandom(16).hex(), webauthn_data=None) return StartLoginResponse(step_1=step_1, step_2=step_2, session_id=os.urandom(16).hex(), webauthn_data=None)
if user.password is not None: if user.password is not None: