Browse Source

[Web] Fix active U2F key in UI

andryyy 5 years ago
parent
commit
affbba50ca
1 changed files with 4 additions and 3 deletions
  1. 4 3
      data/web/inc/functions.inc.php

+ 4 - 3
data/web/inc/functions.inc.php

@@ -1068,9 +1068,10 @@ function verify_tfa_login($username, $token) {
   case "u2f":
   case "u2f":
     try {
     try {
       $reg = $u2f->doAuthenticate(json_decode($_SESSION['authReq']), get_u2f_registrations($username), json_decode($token));
       $reg = $u2f->doAuthenticate(json_decode($_SESSION['authReq']), get_u2f_registrations($username), json_decode($token));
-      $stmt = $pdo->prepare("UPDATE `tfa` SET `counter` = ? WHERE `id` = ?");
-      $stmt->execute(array($reg->counter, $reg->id));
-      $_SESSION['tfa_id'] = $reg->id;
+      $stmt = $pdo->prepare("SELECT `id` FROM `tfa` WHERE `keyHandle` = ?");
+      $stmt->execute(array($reg->keyHandle));
+      $row_key_id = $stmt->fetch(PDO::FETCH_ASSOC);
+      $_SESSION['tfa_id'] = $row_key_id['id'];
       $_SESSION['authReq'] = null;
       $_SESSION['authReq'] = null;
       $_SESSION['return'][] =  array(
       $_SESSION['return'][] =  array(
         'type' => 'success',
         'type' => 'success',