2 Commits
Author SHA1 Message Date
Pietro TarenziandLorenzo Milesi 5ea3404358 2FA: clear auth key from db when disabled
Co-authored-by: Lorenzo Milesi <lorenzo.milesi@yetopen.com>
2022-09-22 11:12:38 +02:00
Pietro Tarenzi 24d5d5744f Check user session before displaying two factor seed
Two factor seed page was not properly checking for user session, allowing an authenticated user to see everyone's 2fa seed
2022-09-16 17:14:53 +02:00