bug fix: 2fa

This commit is contained in:
Usman Nasir
2020-08-11 08:59:47 +05:00
parent 2e9b06e5d6
commit cd593be291

View File

@@ -104,14 +104,13 @@ def verifyLogin(request):
if hashPassword.check_password(admin.password, password):
if admin.twoFA:
if request.session['twofa'] == 0:
import pyotp
totp = pyotp.TOTP(admin.secretKey)
del request.session['twofa']
logging.writeToFile(str(totp.now()))
if totp.verify(data['twofa']):
if totp.now() != data['twofa']:
request.session['twofa'] = 0
data = {'userID': 0, 'loginStatus': 0, 'error_message': "Invalid verification code."}
json_data = json.dumps(data)
response.write(json_data)