BradNut/example-sveltekit-email-password-webauthn
1
0
Fork 0
mirror of https://github.com/BradNut/example-sveltekit-email-password-webauthn synced 2025-09-08 17:40:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix 403 checks

Browse source
This commit is contained in:
pilcrowOnPaper 2024-10-06 16:09:36 +09:00
parent f5b1b80f4c
commit 25c54572a7
4 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/routes/reset-password/2fa/passkey/+server.ts
View file

@ -24,7 +24,7 @@ export async function POST(event: RequestEvent) {
status: 401 status: 401
}); });
} }
if (!user.emailVerified || !user.registeredPasskey || session.twoFactorVerified) { if (!session.emailVerified || !user.registeredPasskey || session.twoFactorVerified) {
return new Response("Forbidden", { return new Response("Forbidden", {
status: 403 status: 403
}); });

2
src/routes/reset-password/2fa/recovery-code/+page.server.ts
View file

@ -35,7 +35,7 @@ async function action(event: RequestEvent) {
message: "Not authenticated" message: "Not authenticated"
}); });
} }
if (!user.emailVerified || !user.registered2FA || session.twoFactorVerified) { if (!session.emailVerified || !user.registered2FA || session.twoFactorVerified) {
return fail(403, { return fail(403, {
message: "Forbidden" message: "Forbidden"
}); });

2
src/routes/reset-password/2fa/security-key/+server.ts
View file

@ -24,7 +24,7 @@ export async function POST(event: RequestEvent) {
status: 401 status: 401
}); });
} }
if (!user.emailVerified || !user.registeredSecurityKey || session.twoFactorVerified) { if (!session.emailVerified || !user.registeredSecurityKey || session.twoFactorVerified) {
return new Response("Forbidden", { return new Response("Forbidden", {
status: 403 status: 403
}); });

2
src/routes/reset-password/2fa/totp/+page.server.ts
View file

@ -40,7 +40,7 @@ async function action(event: RequestEvent) {
message: "Not authenticated" message: "Not authenticated"
}); });
} }
if (!user.emailVerified || !user.registeredTOTP || session.twoFactorVerified) { if (!session.emailVerified || !user.registeredTOTP || session.twoFactorVerified) {
return fail(403, { return fail(403, {
message: "Forbidden" message: "Forbidden"
}); });