mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-09-20 11:00:35 +00:00
perf: MFA coce reuse
This commit is contained in:
@@ -1,5 +1,6 @@
|
||||
import abc
|
||||
|
||||
from django.conf import settings
|
||||
from django.core.cache import cache
|
||||
from django.utils.translation import gettext_lazy as _
|
||||
|
||||
@@ -23,7 +24,12 @@ class BaseMFA(abc.ABC):
|
||||
|
||||
cache_key = f'{self.name}_{self.user.username}'
|
||||
cache_code = cache.get(cache_key)
|
||||
if cache_code == code:
|
||||
|
||||
is_match = cache_code == code
|
||||
if is_match:
|
||||
if not settings.SAFE_MODE:
|
||||
return True, ''
|
||||
else:
|
||||
return False, _(
|
||||
"The two-factor code you entered has either already been used or has expired. "
|
||||
"Please request a new one."
|
||||
@@ -33,7 +39,7 @@ class BaseMFA(abc.ABC):
|
||||
if not ok:
|
||||
return False, msg
|
||||
|
||||
cache.set(cache_key, code, 60 * 5)
|
||||
cache.set(cache_key, code, 60)
|
||||
return True, msg
|
||||
|
||||
def is_authenticated(self):
|
||||
|
Reference in New Issue
Block a user