Fix: 2FA DDP method not getting code on API call that doesn’t require…

…s 2FA (#16998)
RocketChat · Mar 26, 2020 · 29f0396 · 29f0396
1 parent 3111bce
commit 29f0396
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/app/2fa/server/code/index.ts b/app/2fa/server/code/index.ts
@@ -120,6 +120,11 @@ function _checkCodeForUser({ user, code, method, options = {}, connection }: ICh
 		user = getUserForCheck(user);
 	}
 
+	if (!code && !method && connection?.httpHeaders?.['x-2fa-code'] && connection.httpHeaders['x-2fa-method']) {
+		code = connection.httpHeaders['x-2fa-code'];
+		method = connection.httpHeaders['x-2fa-method'];
+	}
+
 	if (connection && isAuthorizedForToken(connection, user, options)) {
 		return true;
 	}