fix email as 2fa with auth requests (#6736)

* fix email as 2fa with auth requests

* increase expiry time of auth_requests to 15 minutes
This commit is contained in:
Stefan Melmuk
2026-01-22 23:25:11 +01:00
committed by GitHub
parent 0c6817cb4e
commit 4737192853
2 changed files with 38 additions and 11 deletions

View File

@@ -177,7 +177,9 @@ impl AuthRequest {
}
pub async fn purge_expired_auth_requests(conn: &DbConn) {
let expiry_time = Utc::now().naive_utc() - chrono::TimeDelta::try_minutes(5).unwrap(); //after 5 minutes, clients reject the request
// delete auth requests older than 15 minutes which is functionally equivalent to upstream:
// https://github.com/bitwarden/server/blob/f8ee2270409f7a13125cd414c450740af605a175/src/Sql/dbo/Auth/Stored%20Procedures/AuthRequest_DeleteIfExpired.sql
let expiry_time = Utc::now().naive_utc() - chrono::TimeDelta::try_minutes(15).unwrap();
for auth_request in Self::find_created_before(&expiry_time, conn).await {
auth_request.delete(conn).await.ok();
}