Fix refresh bug

There was a bug where the session would not retain data correctly after a hard refresh. This fixes that
This commit is contained in:
zandercymatics 2024-05-23 10:02:59 -06:00
parent 5e9db8f1db
commit 0c86311982
No known key found for this signature in database
GPG key ID: FF4636ABEC9682B7
2 changed files with 5 additions and 1 deletions

View file

@ -165,7 +165,9 @@ def _requires_step_up_auth(userinfo) -> bool:
"""
uuid = userinfo.get("sub", "")
email = userinfo.get("email", "")
if not userinfo.get("vtm") or not userinfo.get("vtr"):
# This value is returned after successful auth
user_verified = userinfo.get("vot", "")
if not userinfo.get("vtm") or not userinfo.get("vtr") or not user_verified:
# The acr of this attempt is not at the highest level
# so check if the user needs the higher level
return User.needs_identity_verification(email, uuid)