FIX Ensure canSkipMFA respects whether MFA is enabled

silverstripe / silverstripe-mfa

MultiFactor Authentication for Silverstripe CMS

BSD 3-Clause "New" or "Revised" License

11 stars 24 forks source link

FIX Ensure canSkipMFA respects whether MFA is enabled #381

Closed Cheddam closed 4 years ago

Cheddam commented 4 years ago

Previously the canSkipMFA method did not validate whether MFA was available, which resulted in a login loop if any other condition stopped the user from skipping, such as MFA being mandated via SiteConfig.

Patches #380 for the 4.0 branch.