exclude oauth clients & app passwords from mailbox tfa

2022-07-14 18:37:21 +02:00
parent 528f7da5ef
commit be08742653
2 changed files with 22 additions and 18 deletions
--- a/data/web/inc/prerequisites.inc.php
+++ b/data/web/inc/prerequisites.inc.php
@@ -131,7 +131,7 @@ class mailcowPdo extends OAuth2\Storage\Pdo {
    $this->config['user_table'] = 'mailbox';
  }
  public function checkUserCredentials($username, $password) {
-    if (check_login($username, $password) == 'user') {
+    if (check_login($username, $password, false, true) == 'user') {
      return true;
    }
    return false;