zydronium/manage.get.gov
1
0
Fork 0
mirror of https://github.com/cisagov/manage.get.gov.git synced 2025-05-17 01:57:03 +02:00
Code Issues Projects Releases Packages Wiki Activity

Bring in latest updates to comments from source PR branch

Browse source
This commit is contained in:
Rachid Mrad 2023-12-11 17:22:51 -05:00
commit 270e910520
No known key found for this signature in database
GPG key ID: EF38E4CEC4A8F3CF
22 changed files with 1083 additions and 76 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/djangooidc/views.py
View file

@ -108,7 +108,14 @@ def requires_step_up_auth(userinfo):
acr_value = userinfo.get("ial", "")
uuid = userinfo.get("sub", "")
email = userinfo.get("email", "")
return User.needs_identity_verification(email, uuid) and acr_value != step_up_acr_value
if acr_value != step_up_acr_value:
# The acr of this attempt is not at the highest level
# so check if the user needs the higher level
return User.needs_identity_verification(email, uuid)
else:
# This attempt already came back at the highest level
# so does not require step up
return False
def logout(request, next_page=None):