Fix logout link on 2FA verification page

5 years ago · f3dba54179
parent 45c9ce5eb0
commit f3dba54179
1 changed files with 1 additions and 1 deletions
--- a/app/Http/Middleware/TwoFactorAuth.php
+++ b/app/Http/Middleware/TwoFactorAuth.php
@ -21,7 +21,7 @@ class TwoFactorAuth
            $enabled = (bool) $user->{'2fa_enabled'};
            if($enabled != false) {
                $checkpoint = 'i/auth/checkpoint';
-                if($request->session()->has('2fa.session.active') !== true && !$request->is($checkpoint))
+                if($request->session()->has('2fa.session.active') !== true && !$request->is($checkpoint) && !$request->is('logout'))
                {
                    return redirect('/i/auth/checkpoint');
                } elseif($request->session()->has('2fa.attempts') && (int) $request->session()->get('2fa.attempts') > 3) {