Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Finish recovery code support

Browse Source
This commit is contained in:
Bradley Schofield
2024-07-05 16:16:41 +09:00
parent f0badcd567
commit 27681bfdeb
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/api/account.php
+13
View File
@@ -4242,6 +4242,19 @@ App::delete('/v1/account/mfa/authenticator/webauthn')
$mfaRecoveryCodes = array_values($mfaRecoveryCodes);
$user->setAttribute('mfaRecoveryCodes', $mfaRecoveryCodes);
$dbForProject->updateDocument('users', $user->getId(), $user);
// If a recovery code is used, we wipe all WebAuthn authenticators.
$authenticators = Webauthn::getAuthenticatorsFromUser($user);
foreach ($authenticators as $auth) {
$dbForProject->deleteDocument('authenticators', $auth->getId());
}
$dbForProject->purgeCachedDocument('users', $user->getId());
$queueForEvents->setParam('userId', $user->getId());
return $response->noContent();
} else {
throw new Exception(Exception::USER_INVALID_TOKEN);
}