diff options
| author | zeripath <art27@cantab.net> | 2021-09-27 02:02:01 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-09-26 21:02:01 -0400 |
| commit | 7e98cd58dd670fd83c0ace5e9c8ef9a0407fd575 (patch) | |
| tree | d6a7158517d666f7865540c5d350a48abcb2a72f /services/auth/source/pam | |
| parent | 74542ad35bae2195972df86862da43e8d45f425f (diff) | |
| download | gitea-7e98cd58dd670fd83c0ace5e9c8ef9a0407fd575.tar.gz gitea-7e98cd58dd670fd83c0ace5e9c8ef9a0407fd575.zip | |
Add SkipLocal2FA option to pam and smtp sources (#17078)
* Add SkipLocal2FA option to other pam and smtp sources
Extend #16954 to allow setting skip local 2fa on pam and SMTP authentication sources
Signed-off-by: Andrew Thornton <art27@cantab.net>
* make SkipLocal2FA omitempty
Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: 6543 <6543@obermui.de>
Diffstat (limited to 'services/auth/source/pam')
| -rw-r--r-- | services/auth/source/pam/source.go | 5 | ||||
| -rw-r--r-- | services/auth/source/pam/source_authenticate.go | 5 |
2 files changed, 8 insertions, 2 deletions
diff --git a/services/auth/source/pam/source.go b/services/auth/source/pam/source.go index 0bfa7cdb06..73850cd9a2 100644 --- a/services/auth/source/pam/source.go +++ b/services/auth/source/pam/source.go @@ -19,8 +19,9 @@ import ( // Source holds configuration for the PAM login source. type Source struct { - ServiceName string // pam service (e.g. system-auth) - EmailDomain string + ServiceName string // pam service (e.g. system-auth) + EmailDomain string + SkipLocalTwoFA bool `json:",omitempty"` // Skip Local 2fa for users authenticated with this source // reference to the loginSource loginSource *login.Source diff --git a/services/auth/source/pam/source_authenticate.go b/services/auth/source/pam/source_authenticate.go index ad6fbb5cce..cb5ffc2861 100644 --- a/services/auth/source/pam/source_authenticate.go +++ b/services/auth/source/pam/source_authenticate.go @@ -69,3 +69,8 @@ func (source *Source) Authenticate(user *models.User, userName, password string) return user, nil } + +// IsSkipLocalTwoFA returns if this source should skip local 2fa for password authentication +func (source *Source) IsSkipLocalTwoFA() bool { + return source.SkipLocalTwoFA +} |