From 8bfae74e9c6b6dde6f2e33d9ea45e43c8c4004a7 Mon Sep 17 00:00:00 2001 From: Douwe Maan Date: Fri, 11 Aug 2017 10:54:03 +0000 Subject: [PATCH] Delete correct key from `session` after authenticating using U2F --- app/controllers/concerns/authenticates_with_two_factor.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/concerns/authenticates_with_two_factor.rb b/app/controllers/concerns/authenticates_with_two_factor.rb index ea441b1736b..b75e401a8df 100644 --- a/app/controllers/concerns/authenticates_with_two_factor.rb +++ b/app/controllers/concerns/authenticates_with_two_factor.rb @@ -69,7 +69,7 @@ module AuthenticatesWithTwoFactor if U2fRegistration.authenticate(user, u2f_app_id, user_params[:device_response], session[:challenge]) # Remove any lingering user data from login session.delete(:otp_user_id) - session.delete(:challenges) + session.delete(:challenge) remember_me(user) if user_params[:remember_me] == '1' sign_in(user) -- GitLab