From 8672a979a5048fe72fbef3e52cac5c6ea0e3ae4d Mon Sep 17 00:00:00 2001 From: BlackDex Date: Tue, 12 Nov 2024 15:21:58 +0100 Subject: [PATCH] Remove auth-request deletion 2FA is needed to login even when using login-with-device. If the user didn't saved the 2FA token they still need to provide this. We deleted the auth-request after validation the request, but before 2FA was triggered. Removing the deletion of this record from that point as it will get cleaned-up automatically anyways. Signed-off-by: BlackDex --- src/api/identity.rs | 3 --- 1 file changed, 3 deletions(-) diff --git a/src/api/identity.rs b/src/api/identity.rs index 003e4d97..f2618164 100644 --- a/src/api/identity.rs +++ b/src/api/identity.rs @@ -190,9 +190,6 @@ async fn _password_login( ) }; - // Delete the request after we used it - auth_request.delete(conn).await?; - if auth_request.user_uuid != user.uuid || !auth_request.approved.unwrap_or(false) || ip.ip.to_string() != auth_request.request_ip