didadmin/docuseal
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add fetch options

Browse Source
This commit is contained in:
Pete Matsyburka
2026-02-14 18:10:16 +02:00
parent 40052a2d7c
commit 871ef6dda6
4 changed files with 31 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/submitters/authorized_for_form.rb
+6 -6
View File
@@ -17,9 +17,10 @@ module Submitters
submitter.preferences['require_email_2fa'] != true
return true if request.cookie_jar.encrypted[:email_2fa_slug] == submitter.slug
return true if request.params[:two_factor_token].present? &&
Submitter.signed_id_verifier.verified(request.params[:two_factor_token],
purpose: :email_two_factor) == submitter.slug
token = request.params[:two_factor_token].presence || request.headers['x-two-factor-token'].presence
return true if token.present? &&
Submitter.signed_id_verifier.verified(token, purpose: :email_two_factor) == submitter.slug
false
end
@@ -32,11 +33,10 @@ module Submitters
return true if request.cookie_jar.encrypted[:email_2fa_slug] == submitter.slug
return true if submitter.email == current_user&.email && current_user&.account_id == submitter.account_id
if request.params[:two_factor_token].present?
if (token = request.params[:two_factor_token].presence || request.headers['x-two-factor-token'].presence)
link_2fa_key = [submitter.email.downcase.squish, submitter.submission.template.slug].join(':')
return true if Submitter.signed_id_verifier.verified(request.params[:two_factor_token],
purpose: :email_two_factor) == link_2fa_key
return true if Submitter.signed_id_verifier.verified(token, purpose: :email_two_factor) == link_2fa_key
end
false