mirror of
https://github.com/danny-avila/LibreChat.git
synced 2026-03-15 12:16:33 +01:00
71a3b48504
* fix: require OTP verification for 2FA re-enrollment and backup code regeneration * fix: require OTP verification for account deletion when 2FA is enabled * refactor: Improve code formatting and readability in TwoFactorController and UserController - Reformatted code in TwoFactorController and UserController for better readability by aligning parameters and breaking long lines. - Updated test cases in deleteUser.spec.js and TwoFactorController.spec.js to enhance clarity by formatting object parameters consistently. * refactor: Consolidate OTP and backup code verification logic in TwoFactorController and UserController - Introduced a new `verifyOTPOrBackupCode` function to streamline the verification process for TOTP tokens and backup codes across multiple controllers. - Updated the `enable2FA`, `disable2FA`, and `deleteUserController` methods to utilize the new verification function, enhancing code reusability and readability. - Adjusted related tests to reflect the changes in verification logic, ensuring consistent behavior across different scenarios. - Improved error handling and response messages for verification failures, providing clearer feedback to users. * chore: linting * refactor: Update BackupCodesItem component to enhance OTP verification logic - Consolidated OTP input handling by moving the 2FA verification UI logic to a more consistent location within the component. - Improved the state management for OTP readiness, ensuring the regenerate button is only enabled when the OTP is ready. - Cleaned up imports by removing redundant type imports, enhancing code clarity and maintainability. * chore: lint * fix: stage 2FA re-enrollment in pending fields to prevent disarmament window enable2FA now writes to pendingTotpSecret/pendingBackupCodes instead of overwriting the live fields. confirm2FA performs the atomic swap only after the new TOTP code is verified. If the user abandons mid-flow, their existing 2FA remains active and intact. |
||
|---|---|---|
| .. | ||
| accessRole.ts | ||
| aclEntry.ts | ||
| action.ts | ||
| agent.ts | ||
| agentApiKey.ts | ||
| agentCategory.ts | ||
| assistant.ts | ||
| balance.ts | ||
| banner.ts | ||
| categories.ts | ||
| conversationTag.ts | ||
| convo.ts | ||
| defaults.ts | ||
| file.ts | ||
| group.ts | ||
| index.ts | ||
| key.ts | ||
| mcpServer.ts | ||
| memory.ts | ||
| message.ts | ||
| pluginAuth.ts | ||
| preset.ts | ||
| project.ts | ||
| prompt.ts | ||
| promptGroup.ts | ||
| role.ts | ||
| session.ts | ||
| share.ts | ||
| token.ts | ||
| toolCall.ts | ||
| transaction.ts | ||
| user.ts | ||