Skip to content

Commit 8400f8e

Browse files
committed
FIX SessionStore no longer persists the member's password during MFA login
1 parent c15efc1 commit 8400f8e

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

src/Authenticator/LoginHandler.php

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -96,6 +96,8 @@ public function doLogin($data, MemberLoginForm $form, HTTPRequest $request)
9696

9797
// Create a store for handling MFA for this member
9898
$store = $this->createStore($member);
99+
// We don't need to store the user's password
100+
$request->offsetUnset('Password');
99101
$store->save($request);
100102

101103
// Store the BackURL for use after the process is complete

0 commit comments

Comments
 (0)