ami/tl-vikunja
1
0
Fork 0
Code Activity

Send a notification on failed TOTP

Browse Source
This commit is contained in:
kolaente
2021-07-29 18:05:25 +02:00
parent 1571dfa825
commit 3572ac4b82
2 changed files with 40 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
pkg/routes/api/v1/login.go
View File

@ -20,11 +20,13 @@ import (
"net/http"
"code.vikunja.io/api/pkg/db"
"code.vikunja.io/api/pkg/log"
"code.vikunja.io/api/pkg/models"
"code.vikunja.io/api/pkg/modules/auth"
"code.vikunja.io/api/pkg/notifications"
user2 "code.vikunja.io/api/pkg/user"
"code.vikunja.io/web/handler"
"github.com/golang-jwt/jwt"
"github.com/labstack/echo/v4"
)
@ -64,11 +66,23 @@ func Login(c echo.Context) error {
}
if totpEnabled {
if u.TOTPPasscode == "" {
return handler.HandleHTTPError(user2.ErrInvalidTOTPPasscode{}, c)
}
_, err = user2.ValidateTOTPPasscode(s, &user2.TOTPPasscode{
User: user,
Passcode: u.TOTPPasscode,
})
if err != nil {
if user2.IsErrInvalidTOTPPasscode(err) {
log.Errorf("Invalid TOTP credentials provided for user %d", user.ID)
err2 := notifications.Notify(user, &user2.InvalidTOTPNotification{User: user})
if err2 != nil {
log.Errorf("Could not send failed TOTP notification to user %d: %s", user.ID, err2)
}
}
_ = s.Rollback()
return handler.HandleHTTPError(err, c)
}