J3vb/OwnCord
1
0
Fork 0
mirror of https://github.com/J3vb/OwnCord.git synced 2026-09-03 03:50:00 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: safe registration_open default + TOTP constant-time comparison (T-199, T-201)

Browse Source
This commit is contained in:
jevb
2026-03-31 16:27:21 +02:00
parent 3faac8742a
commit ce64be4e14
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Server/api/auth_handler.go
+1 -1
View File
@@ -793,7 +793,7 @@ func isRequire2FAEnabled(database *db.DB) (bool, error) {
}
func isRegistrationOpen(database *db.DB) (bool, error) {
return getBooleanSetting(database, "registration_open", false)
return getBooleanSetting(database, "registration_open", true)
}
func getBooleanSetting(database *db.DB, key string, defaultValue bool) (bool, error) {