1
0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2026-04-01 21:27:22 +02:00

Add MFA list/disable to the management CLI so admins can restore access if MFA device is lost

This commit is contained in:
Joshua Tauberer
2020-10-29 15:41:34 -04:00
parent ac9ecc3bd3
commit 545e7a52e4
6 changed files with 59 additions and 19 deletions

View File

@@ -63,6 +63,7 @@ def disable_mfa(email, mfa_id, env):
# Disable a particular MFA mode for a user.
c.execute('DELETE FROM mfa WHERE user_id=? AND id=?', (get_user_id(email, c), mfa_id))
conn.commit()
return c.rowcount > 0
def validate_totp_secret(secret):
if type(secret) != str or secret.strip() == "":