extern/2FAuth
1
0
Fork 0
mirror of https://github.com/Bubka/2FAuth.git synced 2025-08-17 17:11:06 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix #110 - Reset WebAuthn user options after last device revocation

Browse Source
This commit is contained in:
Bubka
2022-08-10 18:39:41 +02:00
parent caf72a6c9f
commit fbb85342c1
2 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
app/Http/Controllers/Auth/WebAuthnManageController.php
View File

@ -2,6 +2,7 @@
namespace App\Http\Controllers\Auth;
use App\Facades\Settings;
use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use App\Http\Requests\WebauthnRenameRequest;
@ -72,6 +73,13 @@ class WebAuthnManageController extends Controller
$user = $request->user();
$user->removeCredential($credential);
// Webauthn user options should be reset to prevent impossible login
// See #110
if (blank($user->allCredentialDescriptors())) {
Settings::delete('useWebauthnAsDefault');
Settings::delete('useWebauthnOnly');
}
return response()->json(null, 204);
}
}