Fix MFA bypass vulnerability

This commit is contained in:
gpt-engineer-app[bot]
2025-10-31 13:41:56 +00:00
parent 47607c55e2
commit 4e4876997e
2 changed files with 4 additions and 3 deletions

View File

@@ -43,6 +43,7 @@ export function useRequireMFA() {
isEnrolled,
needsEnrollment: requiresMFA && !isEnrolled,
needsVerification,
isBlocked: requiresMFA && (!isEnrolled || (isEnrolled && aal === 'aal1')), // Convenience flag
aal,
loading: loading || roleLoading,
};