delete otp session auth factor

ocadotechnology · Sep 29, 2023 · 073c961 · 073c961
1 parent 89f39c1
commit 073c961
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/codeforlife/user/auth/backends/token.py b/codeforlife/user/auth/backends/token.py
@@ -24,6 +24,11 @@ def authenticate(
 
         for backup_token in request.user.backup_tokens.all():
             if backup_token.check_token(token):
+                # Delete OTP auth factor from session.
+                request.user.session.session_auth_factors.filter(
+                    auth_factor__type=AuthFactor.Type.OTP
+                ).delete()
+
                 return request.user
 
     def get_user(self, user_id: int):