git-echo/linux_patch_manager
Private
Public Access
1
0
Fork 0
Code Releases 8 Wiki Activity

fix(auth): update SQL queries to use totp_secret_encrypted instead of dropped totp_secret column

Browse Source 
Co-authored-by: Draco Lunaris <331325+Draco-Lunaris@users.noreply.github.com>
This commit is contained in:
Draco-Lunaris-Echo
2026-06-05 21:08:00 -05:00
committed by GitHub
parent 604b31b937
commit 0296cf9c51
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
crates/pm-auth/src/session.rs
View File

@ -120,7 +120,7 @@ pub async fn login(
let user: Option<DbUser> = sqlx::query_as( let user: Option<DbUser> = sqlx::query_as(
r#" r#"
SELECT id, username, display_name, role, auth_provider, SELECT id, username, display_name, role, auth_provider,
password_hash, totp_secret, mfa_enabled, is_active, force_password_reset, password_hash, totp_secret_encrypted, totp_secret_nonce, mfa_enabled, is_active, force_password_reset,
failed_login_attempts, locked_until failed_login_attempts, locked_until
FROM users FROM users
WHERE username = $1 AND auth_provider = 'local' WHERE username = $1 AND auth_provider = 'local'
@ -278,7 +278,7 @@ pub async fn refresh_session(
let user: DbUser = sqlx::query_as( let user: DbUser = sqlx::query_as(
r#" r#"
SELECT id, username, display_name, role, auth_provider, SELECT id, username, display_name, role, auth_provider,
password_hash, totp_secret, mfa_enabled, is_active, force_password_reset, password_hash, totp_secret_encrypted, totp_secret_nonce, mfa_enabled, is_active, force_password_reset,
failed_login_attempts, locked_until failed_login_attempts, locked_until
FROM users WHERE id = $1 FROM users WHERE id = $1
"#, "#,

2
crates/pm-web/src/routes/auth.rs
View File

@ -435,7 +435,7 @@ async fn disable_mfa(
)); ));
} }
sqlx::query("UPDATE users SET totp_secret = NULL, mfa_enabled = FALSE WHERE id = $1") sqlx::query("UPDATE users SET totp_secret_encrypted = NULL, totp_secret_nonce = NULL, mfa_enabled = FALSE WHERE id = $1")
.bind(auth_user.user_id) .bind(auth_user.user_id)
.execute(&state.db) .execute(&state.db)
.await .await