Do not display login form after 2FA token timeout (#2791)

This commit is contained in:
Maxime Besson 2022-08-30 11:47:13 +02:00
parent b2ccead410
commit 5e72df3f06
2 changed files with 2 additions and 1 deletions

View File

@ -433,6 +433,7 @@ sub _choice {
my $session; my $session;
unless ( $session = $self->ott->getToken($token) ) { unless ( $session = $self->ott->getToken($token) ) {
$self->userLogger->info('Token expired'); $self->userLogger->info('Token expired');
$req->noLoginDisplay(1);
return $self->p->do( $req, [ sub { PE_TOKENEXPIRED } ] ); return $self->p->do( $req, [ sub { PE_TOKENEXPIRED } ] );
} }

View File

@ -101,7 +101,7 @@ sub _verify {
my $session; my $session;
unless ( $session = $self->ott->getToken($token) ) { unless ( $session = $self->ott->getToken($token) ) {
$self->userLogger->info('Token expired'); $self->userLogger->info('Token expired');
$self->setSecurity($req); $req->noLoginDisplay(1);
return $self->p->do( $req, [ sub { PE_TOKENEXPIRED } ] ); return $self->p->do( $req, [ sub { PE_TOKENEXPIRED } ] );
} }