Fix setting up 2FA when no providers are set up but backup codes

2FA set up is allowed when only backup codes are set up but no other
provider and no provider is failing.

This patch syncs up the login controller check with the challenge
controller check 10 lines above.

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
pull/30251/head
Christoph Wurst 2 years ago committed by backportbot[bot]
parent dffe146fbb
commit 22ebbba8e6

@ -110,7 +110,7 @@ class TwoFactorMiddleware extends Middleware {
&& $this->twoFactorManager->needsSecondFactor($this->userSession->getUser())) {
$providers = $this->twoFactorManager->getProviderSet($this->userSession->getUser());
if ($providers->getProviders() === [] && !$providers->isProviderMissing()) {
if ($providers->getPrimaryProviders() === [] && !$providers->isProviderMissing()) {
return;
}
}

Loading…
Cancel
Save