deepcrayon/lila
deepcrayon/lila
1
0
Fork 0
Code Releases Activity

hasher rate limiting for 2fa forms

Browse source
This commit is contained in:
Niklas Fiekas 2018-05-06 21:52:59 +02:00
parent f21fd02625
commit a3431461aa
1 changed files with 19 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

34
app/controllers/Account.scala
View file

@ -168,26 +168,30 @@ object Account extends LilaController {
}
def setupTwoFactor = AuthBody { implicit ctx => me =>
implicit val req = ctx.body
val currentSessionId = ~Env.security.api.reqSessionId(ctx.req)
Env.security.forms.setupTwoFactor(me) flatMap { form =>
FormFuResult(form) { err =>
fuccess(html.account.setupTwoFactor(me, err))
} { data =>
UserRepo.setupTwoFactor(me.id, TotpSecret(data.secret)) >>
lila.security.Store.closeUserExceptSessionId(me.id, currentSessionId) inject
Redirect(routes.Account.twoFactor)
controllers.Auth.HasherRateLimit(me.username, ctx.req) { _ =>
implicit val req = ctx.body
val currentSessionId = ~Env.security.api.reqSessionId(ctx.req)
Env.security.forms.setupTwoFactor(me) flatMap { form =>
FormFuResult(form) { err =>
fuccess(html.account.setupTwoFactor(me, err))
} { data =>
UserRepo.setupTwoFactor(me.id, TotpSecret(data.secret)) >>
lila.security.Store.closeUserExceptSessionId(me.id, currentSessionId) inject
Redirect(routes.Account.twoFactor)
}
}
}
}
def disableTwoFactor = AuthBody { implicit ctx => me =>
implicit val req = ctx.body
Env.security.forms.disableTwoFactor(me) flatMap { form =>
FormFuResult(form) { err =>
fuccess(html.account.disableTwoFactor(me, err))
} { _ =>
UserRepo.disableTwoFactor(me.id) inject Redirect(routes.Account.twoFactor)
controllers.Auth.HasherRateLimit(me.username, ctx.req) { _ =>
implicit val req = ctx.body
Env.security.forms.disableTwoFactor(me) flatMap { form =>
FormFuResult(form) { err =>
fuccess(html.account.disableTwoFactor(me, err))
} { _ =>
UserRepo.disableTwoFactor(me.id) inject Redirect(routes.Account.twoFactor)
}
}
}
}