fix(auth): disable TOTP with one code instead of two (#2816)

This commit is contained in:
Hampus authored and GitHub committed 2026-09-17 04:21:50 +02:00
1 parent b019f4a91f
commit 4cecbf1f43
6 files changed
+240 -7

No files matched your search

@@ -449,9 +449,9 @@ describe('MFA Consistency Tests', () => {
await createBuilder(harness, loggedIn.token)
.post('/users/@me/mfa/totp/disable')
.body({
code: backupCodes.backup_codes[0]!.code,
code: 'invalid-code',
})
.expect(403)
.expect(400, 'INVALID_FORM_BODY')
.execute();
await createBuilder(harness, loggedIn.token)
.post('/users/@me/mfa/totp/disable')