nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-06-30 07:36:14 -05:00
Code Activity

[PM-18608] Don't require new device verification on newly created accounts (#5440)

Browse Source 
* Limit new device verification to aged accounts

* set user creation date context for test

* formatting
This commit is contained in:
Kyle Spearrin
2025-02-27 11:01:40 -05:00
committed by GitHub
parent 3533f82d0f
commit 8354929ff1
2 changed files with 36 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/Identity/IdentityServer/RequestValidators/DeviceValidator.cs
View File

@ -120,6 +120,13 @@ public class DeviceValidator(
return DeviceValidationResultType.Success;
}
// User is newly registered, so don't require new device verification
var createdSpan = DateTime.UtcNow - user.CreationDate;
if (createdSpan < TimeSpan.FromHours(24))
{
return DeviceValidationResultType.Success;
}
// CS exception flow
// Check cache for user information
var cacheKey = string.Format(AuthConstants.NewDeviceVerificationExceptionCacheKeyFormat, user.Id.ToString());