30 lines
718 B
Go
30 lines
718 B
Go
|
package middlewares
|
||
|
|
|
||
|
|
import (
|
||
|
|
"github.com/authelia/authelia/v4/internal/authentication"
|
||
|
|
)
|
||
|
|
|
||
|
|
// Require1FA requires the user to have authenticated with at least one-factor authentication (i.e. password).
|
||
|
|
func Require1FA(next RequestHandler) RequestHandler {
|
||
|
|
return func(ctx *AutheliaCtx) {
|
||
|
|
if ctx.GetSession().AuthenticationLevel < authentication.OneFactor {
|
||
|
|
ctx.ReplyForbidden()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
next(ctx)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// Require2FA requires the user to have authenticated with two-factor authentication.
|
||
|
|
func Require2FA(next RequestHandler) RequestHandler {
|
||
|
|
return func(ctx *AutheliaCtx) {
|
||
|
|
if ctx.GetSession().AuthenticationLevel < authentication.TwoFactor {
|
||
|
|
ctx.ReplyForbidden()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
next(ctx)
|
||
|
|
}
|
||
|
|
}
|