iv-org-mirror/invidious-copy-2022-04-11
1
0
Fork 0
mirror of https://gitea.invidious.io/iv-org/invidious-copy-2022-04-11.git synced 2024-08-15 00:43:26 +00:00
Code Issues Projects Releases Packages Wiki Activity

Only allow totp removal endpoint for users w/ 2fa

Browse source
This commit is contained in:
syeopite 2021-07-16 14:37:08 -07:00
parent 413de9c0b1
commit c7b3657878
No known key found for this signature in database
GPG key ID: 6FA616E5A5294A82
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/invidious/routes/accounts.cr
View file

@ -35,7 +35,7 @@ class Invidious::Routes::Accounts < Invidious::Routes::BaseRoute
sid = env.get? "sid"
referer = get_referer(env, unroll: false)
if !user
if !user || user.is_a? User && !user.totp_secret
return env.redirect referer
end
@ -54,7 +54,7 @@ class Invidious::Routes::Accounts < Invidious::Routes::BaseRoute
sid = env.get? "sid"
referer = get_referer(env, unroll: false)
if !user
if !user || user.is_a? User && !user.totp_secret
return env.redirect referer
end