Two Factor Auth is Not Protected

maofalt / Transcendence

4 stars 0 forks source link

Closed YoelRidgway closed 5 months ago

YoelRidgway commented 5 months ago

To reproduce:

Activate 2fa for the user
Log out
Try to log in => you will be prompted to put in the code received in your email.
DONT PUT IN THE CODE => Instead go straight to the home page...
You are magically logged in!!!