ac/ac-deploy
1
0
Fork 0
mirror of git://f0xx.org/ac/ac-deploy synced 2026-07-29 04:19:00 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(2fa): stop redirecting mobile approve GET to login page

Browse Source 
QR scan must open one-tap approve directly; token in URL is sufficient.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Anton Afanasyeu
2026-07-11 21:40:01 +02:00
parent ca28a7b97d
commit 624c9d3d7e
1 changed files with 0 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
sim/cluster0/lab-seeds/backend/public/index.php
View File

@@ -324,13 +324,6 @@ if ($route === '/two-factor/approve' && $_SERVER['REQUEST_METHOD'] === 'POST') {
if ($route === '/two-factor/approve') { if ($route === '/two-factor/approve') {
$rawToken = trim($_GET['token'] ?? ''); $rawToken = trim($_GET['token'] ?? '');
$mobileUser = Auth::user();
if (!$mobileUser) {
// Not logged in on this device — send to login, come back here after
$returnUrl = Auth::authUrl('/two-factor/approve') . '?token=' . urlencode($rawToken);
header('Location: ' . Auth::authUrl('/login') . '?redirect=' . urlencode($returnUrl));
exit;
}
$approvalInfo = $rawToken !== '' ? AuthApproval::getForToken($rawToken) : null; $approvalInfo = $rawToken !== '' ? AuthApproval::getForToken($rawToken) : null;
require __DIR__ . '/../views/two_factor_approve.php'; require __DIR__ . '/../views/two_factor_approve.php';
exit; exit;