coryHawkvelt/gatehouse-api
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Bugfix - Enable admin to see users webauthn methods

Browse Source
This commit is contained in:
Cory Hawkvelt
2026-04-09 22:57:03 +09:30
parent 04e3293b30
commit 2a8b1b0d5b
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
gatehouse_app/api/v1/users/admin.py
+10 -1
View File
@@ -512,7 +512,14 @@ def admin_get_user_mfa(user_id):
user_id=user_id, method_type=AuthMethodType.WEBAUTHN, deleted_at=None, user_id=user_id, method_type=AuthMethodType.WEBAUTHN, deleted_at=None,
).first() ).first()
if webauthn_method and webauthn_method.provider_data: if webauthn_method and webauthn_method.provider_data:
for cred in webauthn_method.provider_data.get("credentials", []): # Handle both single credential (direct in provider_data) and multiple credentials (in credentials array)
credentials = webauthn_method.provider_data.get("credentials", [])
# If no credentials array, check if provider_data itself is a single credential
if not credentials and "credential_id" in webauthn_method.provider_data:
credentials = [webauthn_method.provider_data]
for cred in credentials:
if not cred.get("deleted_at"): if not cred.get("deleted_at"):
mfa_methods.append({ mfa_methods.append({
"id": cred.get("id") or cred.get("credential_id"), "id": cred.get("id") or cred.get("credential_id"),
@@ -588,6 +595,8 @@ def admin_remove_user_mfa(user_id, method_type):
credential_id = request.args.get("credential_id") credential_id = request.args.get("credential_id")
if credential_id: if credential_id:
credentials = (webauthn_method.provider_data or {}).get("credentials", []) credentials = (webauthn_method.provider_data or {}).get("credentials", [])
if not credentials and "credential_id" in (webauthn_method.provider_data or {}):
credentials = [webauthn_method.provider_data]
found = False found = False
new_credentials = [] new_credentials = []
for cred in credentials: for cred in credentials: