Login password validation being bypassed
Closed this issue · 1 comments
buffer808 commented
Trying to use this plugin for my project but seems the password is not checked and redirected directly to the 2fa page even an incorrect password is supplied.
Fixed it by
- creating
\App\Http\Livewire\Auth\Login
and then extending it to the plugin'sLogin::class
- change the
config/filament
toauth.pages.login=\App\Http\Livewire\Auth\Login
- copy the plugin's
authenticate()
method and then - move the
if (app(FilamentTwoFactor::class)->hasTwoFactorEnabled($user))
condition beforereturn
statement
not sure if this happens on my end only, but in case, just sharing my solution
dmandrade commented
Fixed in last version
Thanks