fix(auth): don't require 2fa for app passwords

2026-04-25 10:50:31 +00:00 · 2026-04-18 20:32:02 +01:00
parent 1285d5c675
commit c74bf967cf
2 changed files with 23 additions and 1 deletions
--- a/crates/tranquil-api/src/server/session.rs
+++ b/crates/tranquil-api/src/server/session.rs
@@ -163,6 +163,7 @@ pub async fn create_session(
    let email_2fa_enabled = row.email_2fa_enabled;
    let is_legacy_login = has_totp || email_2fa_enabled;
    let twofa_ctx = tranquil_pds::auth::legacy_2fa::Legacy2faContext {
+        is_app_password: app_password_name.is_some(),
        email_2fa_enabled,
        has_totp,
        allow_legacy_login: row.allow_legacy_login,