mirror of
https://github.com/streetwriters/notesnook-sync-server.git
synced 2026-02-12 19:22:45 +00:00
identify: validate mfa methods against user's enabled methods
This commit is contained in:
@@ -84,7 +84,7 @@ namespace Streetwriters.Identity.Validation
|
||||
var mfaCode = context.Request.Raw["mfa:code"];
|
||||
var mfaMethod = context.Request.Raw["mfa:method"];
|
||||
|
||||
if (string.IsNullOrEmpty(mfaCode) || !MFAService.IsValidMFAMethod(mfaMethod))
|
||||
if (string.IsNullOrEmpty(mfaCode) || !MFAService.IsValidMFAMethod(mfaMethod, user))
|
||||
{
|
||||
var sendPhoneNumber = primaryMethod == MFAMethods.SMS || secondaryMethod == MFAMethods.SMS;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user