Contents

Warden::Manager.after_authentication do |resource, auth, options|
  if auth.env["action_dispatch.cookies"]
    expected_cookie_value = "#{resource.class}-#{resource.public_send(Devise.second_factor_resource_id)}"
    actual_cookie_value = auth.env["action_dispatch.cookies"].signed[DeviseMultiFactor::REMEMBER_TFA_COOKIE_NAME]
    bypass_by_cookie = actual_cookie_value == expected_cookie_value
  end

  if resource.respond_to?(:need_two_factor_authentication?) && !bypass_by_cookie
    if auth.session(options[:scope])[DeviseMultiFactor::NEED_AUTHENTICATION] = resource.need_two_factor_authentication?(auth.request)
      resource.send_new_otp if resource.send_new_otp_after_login?
    end
  end
end

Warden::Manager.before_logout do |resource, auth, _options|
  auth.cookies.delete DeviseMultiFactor::REMEMBER_TFA_COOKIE_NAME if Devise.delete_cookie_on_logout
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
devise-multi-factor-3.1.8	lib/devise_multi_factor/hooks/two_factor_authenticatable.rb
devise-multi-factor-3.1.7	lib/devise_multi_factor/hooks/two_factor_authenticatable.rb
devise-multi-factor-3.1.6	lib/devise_multi_factor/hooks/two_factor_authenticatable.rb
devise-multi-factor-3.1.5	lib/devise_multi_factor/hooks/two_factor_authenticatable.rb