diff --git a/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs b/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs index 0a1d111185..836f1c7c9c 100644 --- a/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs +++ b/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs @@ -68,6 +68,13 @@ namespace Bit.Core.IdentityServer twoFactorProviderType, twoFactorRemember); return; } + + if(twoFactorRequest && twoFactorProviderType == TwoFactorProviderType.Remember) + { + await Task.Delay(2000); // Delay for brute force. + await BuildTwoFactorResultAsync(user, context); + return; + } } } }