Add support for session traps; make mfa challenge session trap; remove DMZ middleware

2020-05-22 09:29:13 -05:00
parent 8701df1acc
commit 64356d42d0
11 changed files with 49 additions and 51 deletions
--- a/app/controllers/auth/MFA.controller.js
+++ b/app/controllers/auth/MFA.controller.js
@@ -30,7 +30,7 @@ class MFAController extends Controller {
            })
        }

-        if ( !req.session.auth.in_dmz ) {
+        if ( !req.trap.has_trap('mfa_challenge') ) {
            return res.redirect(req.session.auth.flow)
        }