From eb80582a65e7f7083474e5eb18e844b660beedfa Mon Sep 17 00:00:00 2001 From: Aevann Date: Sun, 21 Apr 2024 13:36:36 +0200 Subject: [PATCH] fix 500 error --- files/routes/settings.py | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/files/routes/settings.py b/files/routes/settings.py index 8b9f49031..bae7817a7 100644 --- a/files/routes/settings.py +++ b/files/routes/settings.py @@ -582,13 +582,13 @@ def settings_security_post(v): if not v.verifyPass(request.values.get('password')): abort(400, "Invalid password!") - token = request.values.get("2fa_remove") + if v.mfa_secret: + token = request.values.get("2fa_remove") + if not token or not v.validate_2fa(token): + abort(400, "Invalid token!") + v.mfa_secret = None + g.db.add(v) - if not token or not v.validate_2fa(token): - abort(400, "Invalid token!") - - v.mfa_secret = None - g.db.add(v) return {"message": "Two-factor authentication disabled!"} @app.post("/settings/log_out_all_others")