Revert "relax mfa check on service endpoints"

This reverts commit f291cd64dd.
This commit is contained in:
Mike Macgirvin 2024-06-12 09:26:57 +10:00
parent f291cd64dd
commit 0524ca1702
2 changed files with 1 additions and 2 deletions

View file

@ -71,8 +71,7 @@ function authenticate_success($user_record, $channel = false, $login_initial = f
// might want to log success here
}
if ($_SESSION['2FA_REQUIRED'] && !$_SESSION['2FA_VERIFIED'] &&
!in_array(App::$module, ['totp_check', 'dav', 'cdav', 'addressbook', 'calendar', 'api'], true)) {
if ($_SESSION['2FA_REQUIRED'] && !$_SESSION['2FA_VERIFIED'] && App::$module !== 'totp_check') {
goaway(z_root() . '/totp_check');
}

0
util/fhublocs Normal file → Executable file
View file