forked from fedi/mastodon
4e4b3a0c8e
- Disallow suspended accounts from revoking sessions and apps - Allow suspended accounts to access exports
28 lines
703 B
Ruby
28 lines
703 B
Ruby
# frozen_string_literal: true
|
|
|
|
module Settings
|
|
class TwoFactorAuthenticationMethodsController < BaseController
|
|
include ChallengableConcern
|
|
|
|
skip_before_action :require_functional!
|
|
|
|
before_action :require_challenge!, only: :disable
|
|
before_action :require_otp_enabled
|
|
|
|
def index; end
|
|
|
|
def disable
|
|
current_user.disable_two_factor!
|
|
UserMailer.two_factor_disabled(current_user).deliver_later!
|
|
|
|
redirect_to settings_otp_authentication_path, flash: { notice: I18n.t('two_factor_authentication.disabled_success') }
|
|
end
|
|
|
|
private
|
|
|
|
def require_otp_enabled
|
|
redirect_to settings_otp_authentication_path unless current_user.otp_enabled?
|
|
end
|
|
end
|
|
end
|