block OCS if 2FA challenge needs to be solved first

2016-06-01 11:19:49 +07:00 · 2016-06-01 11:19:49 +07:00 · 3ec6f4e165
parent 7b4459d28d
commit 3ec6f4e165
1 changed files with 4 additions and 0 deletions
--- a/lib/private/legacy/api.php
+++ b/lib/private/legacy/api.php
@ -341,6 +341,10 @@ class OC_API {
 		// reuse existing login
 		$loggedIn = \OC::$server->getUserSession()->isLoggedIn();
 		if ($loggedIn === true) {
+			if (\OC::$server->getTwoFactorAuthManager()->needsSecondFactor()) {
+				// Do not allow access to OCS until the 2FA challenge was solved successfully
+				return false;
+			}
 			$ocsApiRequest = isset($_SERVER['HTTP_OCS_APIREQUEST']) ? $_SERVER['HTTP_OCS_APIREQUEST'] === 'true' : false;
 			if ($ocsApiRequest) {