Do not display login form after 2FA token timeout (#2791)

This commit is contained in:
Maxime Besson 2022-08-30 11:47:13 +02:00
parent b2ccead410
commit 5e72df3f06
2 changed files with 2 additions and 1 deletions

View File

@ -433,6 +433,7 @@ sub _choice {
my $session;
unless ( $session = $self->ott->getToken($token) ) {
$self->userLogger->info('Token expired');
$req->noLoginDisplay(1);
return $self->p->do( $req, [ sub { PE_TOKENEXPIRED } ] );
}

View File

@ -101,7 +101,7 @@ sub _verify {
my $session;
unless ( $session = $self->ott->getToken($token) ) {
$self->userLogger->info('Token expired');
$self->setSecurity($req);
$req->noLoginDisplay(1);
return $self->p->do( $req, [ sub { PE_TOKENEXPIRED } ] );
}