fix(api): exempt bots from being considered unclaimed users (#45)

2026-01-06 03:45:28 +01:00
parent 1cef2290fe
commit 6f21a7e37b
17 changed files with 45 additions and 51 deletions
--- a/fluxer_api/src/auth/services/SudoVerificationService.ts
+++ b/fluxer_api/src/auth/services/SudoVerificationService.ts
@@ -97,7 +97,7 @@ async function verifySudoMode(
 		return {verified: true, sudoToken, method: 'mfa'};
 	}

-	const isUnclaimedAccount = !user.passwordHash;
+	const isUnclaimedAccount = user.isUnclaimedAccount();
 	if (isUnclaimedAccount && !hasMfa) {
 		return {verified: true, method: 'password'};
 	}