1 files changed, 4 insertions, 0 deletions
diff --git a/routes/users.js b/routes/users.js
index ea4026b8..615e9d41 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -347,6 +347,10 @@ export default {
     res.send(await bcrypt.compare(password, user.password));
   },
 
+  async pin({ body: { pin }, user }, res) {
+    res.send(!user.pin || user.pin === pin);
+  },
+
   async otpsecret(req, res) {
     try {
       await requirePin(req);