Merge pull request #16884 from marcusmoore/bug/sc-29097

Removed `2fa_authed` from session upon logout
2025-05-08 06:23:26 +01:00
parent a916767392 cc06187f31
commit 352b935dee
1 changed files with 1 additions and 0 deletions
--- a/app/Http/Controllers/Auth/LoginController.php
+++ b/app/Http/Controllers/Auth/LoginController.php
@@ -484,6 +484,7 @@ class LoginController extends Controller
        }

        $request->session()->regenerate(true);
+        $request->session()->forget('2fa_authed');

        if ($request->session()->has('password_hash_'.Auth::getDefaultDriver())){
            $request->session()->remove('password_hash_'.Auth::getDefaultDriver());