Contents

module Devise
  module Strategies
    class TwoFactorBackupable < Devise::Strategies::DatabaseAuthenticatable

      def authenticate!
        resource = mapping.to.find_for_database_authentication(authentication_hash)

        if validate(resource) { resource.invalidate_otp_backup_code!(params[scope]['otp_attempt']) }
          # Devise fails to authenticate invalidated resources, but if we've
          # gotten here, the object changed (Since we deleted a recovery code)
          resource.save!
          super
        end

        fail(Devise.paranoid ? :invalid : :not_found_in_database) unless resource

        # We want to cascade to the next strategy if this one fails,
        # but database authenticatable automatically halts on a bad password
        @halted = false if @result == :failure
      end
    end
  end
end

Warden::Strategies.add(:two_factor_backupable, Devise::Strategies::TwoFactorBackupable)

Version data entries

8 entries across 8 versions & 1 rubygems

Version	Path
devise-two-factor-5.1.0	lib/devise_two_factor/strategies/two_factor_backupable.rb
devise-two-factor-4.1.1	lib/devise_two_factor/strategies/two_factor_backupable.rb
devise-two-factor-4.1.0	lib/devise_two_factor/strategies/two_factor_backupable.rb
devise-two-factor-5.0.0	lib/devise_two_factor/strategies/two_factor_backupable.rb
devise-two-factor-4.0.2	lib/devise_two_factor/strategies/two_factor_backupable.rb
devise-two-factor-4.0.1	lib/devise_two_factor/strategies/two_factor_backupable.rb
devise-two-factor-4.0.0	lib/devise_two_factor/strategies/two_factor_backupable.rb
devise-two-factor-3.1.0	lib/devise_two_factor/strategies/two_factor_backupable.rb