nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-07-01 16:12:49 -05:00
Code Activity

Allow bypass of captcha token if the device is known (#1626)

Browse Source
This commit is contained in:
Matt Gibson
2021-10-08 18:59:35 -05:00
committed by GitHub
parent ee7b608a46
commit 8a5a371a8f
2 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs
View File

@ -58,9 +58,10 @@ namespace Bit.Core.IdentityServer
}
string bypassToken = null;
if (_captchaValidationService.RequireCaptchaValidation(_currentContext))
var user = await _userManager.FindByEmailAsync(context.UserName.ToLowerInvariant());
var unknownDevice = !await KnownDeviceAsync(user, context.Request);
if (!unknownDevice && _captchaValidationService.RequireCaptchaValidation(_currentContext))
{
var user = await _userManager.FindByEmailAsync(context.UserName.ToLowerInvariant());
var captchaResponse = context.Request.Raw["captchaResponse"]?.ToString();
if (string.IsNullOrWhiteSpace(captchaResponse))