fix(mfa): validate password before consuming backup code on disable

2026-04-20 15:05:02 +07:00
parent 5123b7880a
commit 0ac947e3be
1 changed files with 1 additions and 1 deletions
@@ -2,8 +2,8 @@ class Api::V1::Profile::MfaController < Api::BaseController
  before_action :check_mfa_feature_available
  before_action :check_mfa_enabled, only: [:destroy, :backup_codes]
  before_action :check_mfa_disabled, only: [:create, :verify]
-  before_action :validate_otp, only: [:verify, :backup_codes, :destroy]
  before_action :validate_password, only: [:destroy]
+  before_action :validate_otp, only: [:verify, :backup_codes, :destroy]

  def show; end