webbingbrasil/filament-2fa

Login password validation being bypassed

Closed this issue · 1 comments

Trying to use this plugin for my project but seems the password is not checked and redirected directly to the 2fa page even an incorrect password is supplied.

Fixed it by

  • creating \App\Http\Livewire\Auth\Login and then extending it to the plugin's Login::class
  • change the config/filament to auth.pages.login=\App\Http\Livewire\Auth\Login
  • copy the plugin's authenticate() method and then
  • move the if (app(FilamentTwoFactor::class)->hasTwoFactorEnabled($user)) condition before return statement

not sure if this happens on my end only, but in case, just sharing my solution

Fixed in last version

Thanks