proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-10-04 19:01:16 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

api: add /access/users/<userid>/unlock-tfa api call

Browse Source 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
This commit is contained in:
Wolfgang Bumiller 2023-05-30 13:39:15 +02:00
parent 9036621e28
commit 330b8dbbe1
1 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
src/PVE/API2/User.pm
View File

@ -556,6 +556,38 @@ __PACKAGE__->register_method ({
return $res;
}});
__PACKAGE__->register_method ({
name => 'unlock_tfa',
path => '{userid}/unlock-tfa',
method => 'PUT',
protected => 1,
description => "Unlock a user's TFA authentication.",
permissions => {
check => [ 'userid-group', ['User.Modify']],
},
parameters => {
additionalProperties => 0,
properties => {
userid => get_standard_option('userid-completed'),
},
},
returns => { type => 'boolean' },
code => sub {
my ($param) = @_;
my $userid = extract_param($param, "userid");
my $user_was_locked = PVE::AccessControl::lock_tfa_config(sub {
my $tfa_cfg = cfs_read_file('priv/tfa.cfg');
my $was_locked = $tfa_cfg->api_unlock_tfa($userid);
cfs_write_file('priv/tfa.cfg', $tfa_cfg)
if $was_locked;
return $was_locked;
});
return $user_was_locked;
}});
__PACKAGE__->register_method ({
name => 'token_index',
path => '{userid}/token',