Only create the opt_secret once. If created leave alone.

2024-05-22 06:30:10 +01:00 · 2024-05-22 06:30:10 +01:00 · 0edc7d0563
commit 0edc7d0563
parent b72f88f60f
1 changed files with 4 additions and 2 deletions
--- a/app/controllers/mfas_controller.rb
+++ b/app/controllers/mfas_controller.rb
@ -2,8 +2,10 @@ class MfasController < ApplicationController
    def new
        issuer = "Hidden Agenda Email"
        label = "#{issuer}:#{current_user.email}"
+        if current_user.otp_secret.to_s.length == 0
            current_user.otp_secret = User.generate_otp_secret
            current_user.save!
+        end

        qrcode = RQRCode::QRCode.new([{ data: current_user.otp_provisioning_uri(label, issuer: issuer), mode: :byte_8bit }])