fix: allow additional secret fields when setting two factor in rest-e…

…xpress
accounts-js · Nov 23, 2023 · 5039b8d · 5039b8d
1 parent 3bd3fb8
commit 5039b8d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/packages/rest-express/src/endpoints/password/two-factor.ts b/packages/rest-express/src/endpoints/password/two-factor.ts
@@ -18,6 +18,7 @@ export const twoFactorSecret =
   };
 
 export const twoFactorSet = (accountsServer: AccountsServer) => [
+  body('secret').isObject().notEmpty(),
   body('secret.base32').isString().notEmpty(),
   body('code').isString().notEmpty(),
   async (req: express.Request, res: express.Response) => {