Commit26cc758

committed

fix: check one-time passcode expiry

1 parentbff384b commit26cc758Copy full SHA for 26cc758

File tree

+10

-9

lines changed

+10

-9

lines changed

Lines changed: 2 additions & 2 deletions

Some generated files are not rendered by default. Learn more aboutcustomizing how changed files appear on GitHub.

Lines changed: 2 additions & 2 deletions

Some generated files are not rendered by default. Learn more aboutcustomizing how changed files appear on GitHub.

Lines changed: 4 additions & 3 deletions

Original file line number	Diff line number	Diff line change
`@@ -205,7 +205,7 @@ func (api API) postConvertLoginType(rw http.ResponseWriter, r http.Request) {`
`205`	`205`
`206`	`206`	`// Requests a one-time passcode for a user.`
`207`	`207`	`//`
`208`		`-// @Summary Request one-time passcode.`
	`208`	`+// @Summary Request one-time passcode`
`209`	`209`	`// @ID request-one-time-passcode`
`210`	`210`	`// @Accept json`
`211`	`211`	`// @Tags Authorization`
`@@ -307,7 +307,7 @@ func (api *API) notifyUserRequestedOneTimePasscode(ctx context.Context, user dat`
`307`	`307`
`308`	`308`	`// Change a users password with a one-time passcode.`
`309`	`309`	`//`
`310`		`-// @Summary Change password with a one-time passcode.`
	`310`	`+// @Summary Change password with a one-time passcode`
`311`	`311`	`// @ID change-password-with-a-one-time-passcode`
`312`	`312`	`// @Accept json`
`313`	`313`	`// @Tags Authorization`
`@@ -358,7 +358,8 @@ func (api *API) postChangePasswordWithOneTimePasscode(rw http.ResponseWriter, r`
`358`	`358`	`returnxerrors.Errorf("compare one time passcode: %w",err)`
`359`	`359`	`}`
`360`	`360`
`361`		`-if!equal {`
	`361`	`+now:=dbtime.Now()`
	`362`	`+if!equal\|\|now.After(user.OneTimePasscodeExpiresAt.Time) {`
`362`	`363`	`httpapi.Write(ctx,rw,http.StatusBadRequest, codersdk.Response{`
`363`	`364`	`Message:"Incorrect email or one-time-passcode.",`
`364`	`365`	`})`

Lines changed: 2 additions & 2 deletions

Some generated files are not rendered by default. Learn more aboutcustomizing how changed files appear on GitHub.

Comments

(0)