Signed-off-by: Wolfgang Bumiller <w.bumil...@proxmox.com>
---
 PVE/HTTPServer.pm | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/PVE/HTTPServer.pm b/PVE/HTTPServer.pm
index 9a02e799..a3174fbd 100755
--- a/PVE/HTTPServer.pm
+++ b/PVE/HTTPServer.pm
@@ -80,7 +80,13 @@ sub auth_handler {
 
        die "No ticket\n" if !$ticket;
 
-       ($username, $age) = PVE::AccessControl::verify_ticket($ticket);
+       ($username, $age, my $challenge) = 
PVE::AccessControl::verify_ticket($ticket);
+
+       if (defined($challenge)) {
+           $rpcenv->set_u2f_challenge($challenge);
+           die "No ticket2\n"
+               if ($rel_uri ne '/access/u2f' || $method ne 'POST');
+       }
 
        $rpcenv->set_user($username);
 
-- 
2.11.0


_______________________________________________
pve-devel mailing list
pve-devel@pve.proxmox.com
https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to