Update Two factor middleware to allow 3 attempts

6 years ago · d3eaccf706
parent 2c16db187b
commit d3eaccf706
1 changed files with 1 additions and 1 deletions
--- a/app/Http/Middleware/TwoFactorAuth.php
+++ b/app/Http/Middleware/TwoFactorAuth.php
@ -24,7 +24,7 @@ class TwoFactorAuth
                if($request->session()->has('2fa.session.active') !== true && !$request->is($checkpoint))
                {
                    return redirect('/i/auth/checkpoint');
-                } elseif($request->session()->has('2fa.attempts') || (int) $request->session()->get('2fa.attempts') > 3) {
+                } elseif($request->session()->has('2fa.attempts') && (int) $request->session()->get('2fa.attempts') > 3) {
                    $request->session()->pull('2fa.attempts');
                    Auth::logout();
                }