Fixed clearing timed OTP when backup codes are not allowed (#4268)
Ylian Saint-Hilaire committed
Jul 14, 2022 at 13:56 UTC
c7561b5dd8f7bdef4d0bd3b28804d5cc255ca31e
1 file changed
-3
meshuser.js
-3
@@ -3397,9 +3397,6 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
3397
// Do not allow this command if 2FA's are locked
3398
if ((domain.passwordrequirements) && (domain.passwordrequirements.lock2factor == true)) return;
3399
3400
- // Do not allow this command if backup codes are not allowed
3401
- if ((domain.passwordrequirements) && (domain.passwordrequirements.backupcode2factor == false)) return;
3402
-
3400
// Do not allow this command when logged in using a login token
3401
if (req.session.loginToken != null) break;
3402