Fixed 2-factor auth issue
Ylian Saint-Hilaire committed
Nov 14, 2019 at 17:39 UTC
3d2974eca0642117a4254c0d1c5ab76369b7bcd4
1 file changed
+1
-1
webserver.js
+1
-1
@@ -3438,7 +3438,7 @@ module.exports.CreateWebServer = function (parent, db, args, certificates) {
3438
if ((err == null) && (user)) {
3439
// Check if a 2nd factor is needed
3440
if (checkUserOneTimePasswordRequired(domain, user) == true) {
3441
- if (req.query.token) {
3441
+ if (typeof req.query.token != 'string') {
3442
try { ws.send(JSON.stringify({ action: 'close', cause: 'noauth', msg: 'tokenrequired' })); ws.close(); } catch (e) { }
3443
} else {
3444
checkUserOneTimePassword(req, domain, user, req.query.token, null, function (result) {