perf: 统一校验当前用户api (#8324)

Co-authored-by: feng626 <1304903146@qq.com>
This commit is contained in:
fit2bot
2022-06-07 19:26:07 +08:00
committed by GitHub
parent 2366f02d10
commit a5acdb9f60
16 changed files with 148 additions and 31 deletions

View File

@@ -255,3 +255,16 @@ def is_auth_password_time_valid(session):
def is_auth_otp_time_valid(session):
return is_auth_time_valid(session, 'auth_otp_expired_at')
def is_confirm_time_valid(session, key):
if not settings.SECURITY_VIEW_AUTH_NEED_MFA:
return True
mfa_verify_time = session.get(key, 0)
if time.time() - mfa_verify_time < settings.SECURITY_MFA_VERIFY_TTL:
return True
return False
def is_auth_confirm_time_valid(session):
return is_confirm_time_valid(session, 'MFA_VERIFY_TIME')