auth fix

2026-06-03 16:14:49 -04:00
parent e11858c2f3
commit 07519b4f48
1 changed files with 3 additions and 2 deletions
@@ -195,13 +195,14 @@ export function register(app) {
      return
    }
    const user = state.studyUsers.find(u => u.id === userId)
-    if (!user || !user.totpSecret || !user.totpVerified) {
+    const twoFaMethodCheck = user?.twoFaMethod ?? (user?.totpSecret && user?.totpVerified ? 'app' : null)
+    if (!user || !twoFaMethodCheck) {
      res.status(400).json({ message: '2FA is not configured for this account.' })
      return
    }

    const codeStr = typeof code === 'string' ? code.replace(/\s/g, '') : ''
-    const twoFaMethod = user.twoFaMethod ?? (user.totpSecret && user.totpVerified ? 'app' : null)
+    const twoFaMethod = twoFaMethodCheck

    function completeLogin(extra = {}) {
      user.lastLoginAt = new Date().toISOString()