Only create the opt_secret once. If created leave alone.

This commit is contained in:
Jez Caudle 2024-05-22 06:30:10 +01:00
parent b72f88f60f
commit 0edc7d0563

View File

@ -2,8 +2,10 @@ class MfasController < ApplicationController
def new def new
issuer = "Hidden Agenda Email" issuer = "Hidden Agenda Email"
label = "#{issuer}:#{current_user.email}" label = "#{issuer}:#{current_user.email}"
current_user.otp_secret = User.generate_otp_secret if current_user.otp_secret.to_s.length == 0
current_user.save! current_user.otp_secret = User.generate_otp_secret
current_user.save!
end
qrcode = RQRCode::QRCode.new([{ data: current_user.otp_provisioning_uri(label, issuer: issuer), mode: :byte_8bit }]) qrcode = RQRCode::QRCode.new([{ data: current_user.otp_provisioning_uri(label, issuer: issuer), mode: :byte_8bit }])