fix(auth): enforce 2fa check before account deletion, if enabled #107
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Currently the delete account endpoint is possible for a 2fa enabled account, without verifying the one time code. That should not work, as a 2fa account should have that level of protection on such a destructive action.