tyler/proxmox-backup
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

tfa: use UNAUTHORIZED http status in password check

Browse Source 
to trigger our 3s delay in the rest handler

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
This commit is contained in:
Wolfgang Bumiller 2021-01-08 10:30:11 +01:00
parent abfe0c0e70
commit 7ad33e8052
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/api2/access/tfa.rs
View File

@ -25,8 +25,9 @@ fn tfa_update_auth(
let authid: Authid = rpcenv.get_auth_id().unwrap().parse()?;
if authid.user() != Userid::root_userid() {
let password = password.ok_or_else(|| format_err!("missing password"))?;
let _: () = crate::auth::authenticate_user(authid.user(), &password)?;
let password = password.ok_or_else(|| http_err!(UNAUTHORIZED, "missing password"))?;
let _: () = crate::auth::authenticate_user(authid.user(), &password)
.map_err(|err| http_err!(UNAUTHORIZED, "{}", err))?;
}
// After authentication, verify that the to-be-modified user actually exists:
@ -37,7 +38,7 @@ fn tfa_update_auth(
.lookup::<crate::config::user::User>("user", userid.as_str())
.is_err()
{
bail!("user '{}' does not exists.", userid);
http_bail!(UNAUTHORIZED, "user '{}' does not exists.", userid);
}
}