Merge pull request #7981 from appwrite/fix-recovery-challenge-check
fix(auth): fix challenge type check
This commit is contained in:
commit
0919b2d06a
|
@ -4069,7 +4069,7 @@ App::put('/v1/account/mfa/challenge')
|
||||||
$recoveryCodeChallenge = function (Document $challenge, Document $user, string $otp) use ($dbForProject) {
|
$recoveryCodeChallenge = function (Document $challenge, Document $user, string $otp) use ($dbForProject) {
|
||||||
if (
|
if (
|
||||||
$challenge->isSet('type') &&
|
$challenge->isSet('type') &&
|
||||||
$challenge->getAttribute('type') === Type::RECOVERY_CODE
|
$challenge->getAttribute('type') === \strtolower(Type::RECOVERY_CODE)
|
||||||
) {
|
) {
|
||||||
$mfaRecoveryCodes = $user->getAttribute('mfaRecoveryCodes', []);
|
$mfaRecoveryCodes = $user->getAttribute('mfaRecoveryCodes', []);
|
||||||
if (in_array($otp, $mfaRecoveryCodes)) {
|
if (in_array($otp, $mfaRecoveryCodes)) {
|
||||||
|
@ -4091,7 +4091,7 @@ App::put('/v1/account/mfa/challenge')
|
||||||
Type::TOTP => Challenge\TOTP::challenge($challenge, $user, $otp),
|
Type::TOTP => Challenge\TOTP::challenge($challenge, $user, $otp),
|
||||||
Type::PHONE => Challenge\Phone::challenge($challenge, $user, $otp),
|
Type::PHONE => Challenge\Phone::challenge($challenge, $user, $otp),
|
||||||
Type::EMAIL => Challenge\Email::challenge($challenge, $user, $otp),
|
Type::EMAIL => Challenge\Email::challenge($challenge, $user, $otp),
|
||||||
Type::RECOVERY_CODE => $recoveryCodeChallenge($challenge, $user, $otp),
|
\strtolower(Type::RECOVERY_CODE) => $recoveryCodeChallenge($challenge, $user, $otp),
|
||||||
default => false
|
default => false
|
||||||
});
|
});
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue