davidl/asset-management-system
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix login by excluding 2FA code from auth credentials

Browse Source
This commit is contained in:
Arya Dwi Putra
2025-12-02 09:57:51 +07:00
parent 42f8d6b6f2
commit 4740b5c2ac
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
app/Http/Controllers/AuthController.php
View File

@@ -4,6 +4,7 @@ namespace App\Http\Controllers;
use App\Models\User;
use App\Services\Security\TwoFactorService;
use Illuminate\Support\Arr;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Hash;
@@ -33,11 +34,13 @@ class AuthController extends Controller
]);
$remember = $request->boolean('remember');
$code = $credentials['code'] ?? null;
$authCredentials = Arr::only($credentials, ['email', 'password']);
if (Auth::attempt($credentials, $remember)) {
if (Auth::attempt($authCredentials, $remember)) {
$user = Auth::user();
if ($user->two_factor_enabled) {
if (!$credentials['code'] || !$this->twoFactor->verifyCode($user->two_factor_secret, $credentials['code'])) {
if (!$code || !$this->twoFactor->verifyCode($user->two_factor_secret, $code)) {
Auth::logout();
return back()->withErrors(['code' => 'Kode 2FA tidak valid atau belum diisi.'])->withInput();
}