#1317 Remove mfa capability if multifactor is disable

TheHive-Project · May 24, 2020 · 465041f · 465041f
1 parent b274373
commit 465041f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/thehive/app/org/thp/thehive/services/TOTPAuthSrv.scala b/thehive/app/org/thp/thehive/services/TOTPAuthSrv.scala
@@ -34,7 +34,7 @@ class TOTPAuthSrv(
   val issuerNameConfig: ConfigItem[String, String] = appConfig.item[String]("auth.multifactor.issuer", "name of the multifactor issuer")
   def issuerName: String                           = issuerNameConfig.get
 
-  override def capabilities: Set[AuthCapability.Value] = super.capabilities + AuthCapability.mfa
+  override def capabilities: Set[AuthCapability.Value] = if (enabled) super.capabilities + AuthCapability.mfa else super.capabilities
 
   def codeIsValid(secret: String, code: Int): Boolean = {
     val key     = new Base32().decode(secret)