summaryrefslogtreecommitdiff
path: root/lib/authenticated_system.rb
diff options
context:
space:
mode:
authorerdgeist <erdgeist@erdgeist.org>2026-07-24 13:53:13 +0200
committererdgeist <erdgeist@erdgeist.org>2026-07-24 13:53:13 +0200
commitdcb576618b868b888a5b1b31e35491f300ce4050 (patch)
tree3a970eae416fba2939cd366b1ba2b5d294154f2c /lib/authenticated_system.rb
parentfefec929c59c72dc93e4be30e8f23cd8c5258b0a (diff)
Complete the login only after the second factor
Enrolled users get a pending marker instead of a session after the password step; a valid code through the challenge writes the real session via reset_session. otp_required without enrollment funnels into setup everywhere except the enrollment, user, and login machinery.
Diffstat (limited to 'lib/authenticated_system.rb')
0 files changed, 0 insertions, 0 deletions