handle two factor remember failed case

2025-12-18 01:03:17 +00:00 · 2017-06-23 10:46:04 -04:00
parent 15dcb43f44
commit 64189067cd
1 changed files with 7 additions and 0 deletions
--- a/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs
+++ b/src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs
@@ -68,6 +68,13 @@ namespace Bit.Core.IdentityServer
                                twoFactorProviderType, twoFactorRemember);
                            return;
                        }
+
+                        if(twoFactorRequest && twoFactorProviderType == TwoFactorProviderType.Remember)
+                        {
+                            await Task.Delay(2000); // Delay for brute force.
+                            await BuildTwoFactorResultAsync(user, context);
+                            return;
+                        }
                    }
                }
            }