api: tfa management and login

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
This commit is contained in:
Wolfgang Bumiller 2020-11-16 14:37:22 +01:00
parent 8bb221663e
commit 33839410b9

View File

@ -600,8 +600,9 @@ fn check_auth(
let ticket = user_auth_data.ticket.clone(); let ticket = user_auth_data.ticket.clone();
let ticket_lifetime = tools::ticket::TICKET_LIFETIME; let ticket_lifetime = tools::ticket::TICKET_LIFETIME;
let userid: Userid = Ticket::parse(&ticket)? let userid: Userid = Ticket::<super::ticket::ApiTicket>::parse(&ticket)?
.verify_with_time_frame(public_auth_key(), "PBS", None, -300..ticket_lifetime)?; .verify_with_time_frame(public_auth_key(), "PBS", None, -300..ticket_lifetime)?
.require_full()?;
let auth_id = Authid::from(userid.clone()); let auth_id = Authid::from(userid.clone());
if !user_info.is_active_auth_id(&auth_id) { if !user_info.is_active_auth_id(&auth_id) {