fix(web): use a distinct salt for TOTP authentication

If TOTP is enabled for a user, it will be disabled until the user
configure it again, which will generate a new private salt.
This commit is contained in:
Francis Lachapelle committed 2021-10-15 16:18:23 -04:00
1 parent ba86b0fd11
commit d4da1facf9
11 files changed
+115 -35

No files matched your search

@@ -44,6 +44,11 @@
if (data.totpmissingkey) {
vm.loginState = 'totpcode';
}
else if (data.totpdisabled) {
vm.loginState = 'totpdisabled';
vm.cn = data.cn;
vm.url = data.url;
}
else {
vm.loginState = 'logged';
vm.cn = data.cn;