nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-07-11 21:03:47 -05:00
Code Activity

Add email notification on Two Factor recovery use (#625)

Browse Source 
* Add email notification on Two Factor recovery use

* A user who has lost their 2fa device can clear out the
  2fa settings using a recovery code.  When this happens
  it gets logged but no notification to the user occurs.
* Add a notification to be sent when 2fa recovery code is
  used

* Add email message templates
This commit is contained in:
Brian Becker
2019-12-23 15:26:39 -05:00
committed by Kyle Spearrin
parent 665e78ec1c
commit 0be86072f7
7 changed files with 62 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
src/Core/Services/Implementations/UserService.cs
View File

@ -674,6 +674,7 @@ namespace Bit.Core.Services
user.TwoFactorProviders = null;
user.TwoFactorRecoveryCode = CoreHelpers.SecureRandomString(32, upper: false, special: false);
await SaveUserAsync(user);
await _mailService.SendRecoverTwoFactorEmail(user.Email, DateTime.UtcNow, _currentContext.IpAddress);
await _eventService.LogUserEventAsync(user.Id, EventType.User_Recovered2fa);
return true;