--resetaccount will now remove SMS and Device Push 2FA, #3455
Ylian Saint-Hilaire committed
Jan 13, 2022 at 17:34 UTC
e5ab311a0f4bb46458a551b7d6a4af2e326a86e3
1 file changed
+1
-1
meshcentral.js
+1
-1
@@ -827,7 +827,7 @@ function CreateMeshCentralServer(config, args) {
827
if (err != null) { console.log("Database error: " + err); process.exit(); return; }
828
if ((docs == null) || (docs.length == 0)) { console.log("Unknown userid, usage: --resetaccount [userid] --domain (domain) --pass [password]."); process.exit(); return; }
829
var user = docs[0]; if ((user.siteadmin) && (user.siteadmin != 0xFFFFFFFF) && (user.siteadmin & 32) != 0) { user.siteadmin -= 32; } // Unlock the account.
830
- delete user.otpekey; delete user.otpsecret; delete user.otpkeys; delete user.otphkeys; // Disable 2FA
830
+ delete user.phone; delete user.otpekey; delete user.otpsecret; delete user.otpkeys; delete user.otphkeys; delete user2.otpdev; delete user2.otpsms; // Disable 2FA
831
if (obj.args.hashpass) {
832
// Reset an account using a pre-hashed password. Use --hashpassword to pre-hash a password.
833
var hashpasssplit = obj.args.hashpass.split(',');