From 70d103470e3aaa9d127867571589cf3de8f23523 Mon Sep 17 00:00:00 2001
From: Adam Soltys <adam@coinos.io>
Date: Tue, 11 Mar 2025 12:48:34 -0700
Subject: don't require 2fa for nostrlogin

---
 routes/users.ts | 8 --------
 1 file changed, 8 deletions(-)

(limited to 'routes/users.ts')

diff --git a/routes/users.ts b/routes/users.ts
index 4bce1bb4..6e4c98dd 100644
--- a/routes/users.ts
+++ b/routes/users.ts
@@ -373,14 +373,6 @@ export default {
       const { username } = user;
       l("logging in", username, ip);
 
-      if (
-        user.twofa &&
-        (typeof twofa === "undefined" ||
-          !authenticator.check(twofa, user.otpsecret))
-      ) {
-        return res.code(401).send("2fa required");
-      }
-
       const payload = { id: user.id };
       const token = jwt.sign(payload, config.jwt);
       res.cookie("token", token, { expires: new Date(Date.now() + 432000000) });
-- 
cgit v1.2.3