kobotoolbox / kpi / 19711503660

81%

master: 76%

push

github

fix(mfa): fix recovery codes error in token field DEV-1303 (#6495)

### 💭 Notes
This fixes the MFA code validation in the API endpoints for MFA
management for deactivation and regenerate codes. Previously only the
TOTP code was taken into account, now it checks both TOTP and recovery
codes for those two endpoints.

### 👀 Preview steps
1. ℹ️ have an account with MFA enabled
2. Go to the account user security settings
3. Deactivate MFA
4. 🔴 [on main] enter a recovery code to deactivate and it will show an
error
5. 🟢 [on PR] enter a recovery code to deactivate and it should
deactivate the MFA successfully
6. Repeat for the regenerate recovery codes process

6927 of 11252 branches covered (61.56%)

36 of 38 new or added lines in 4 files covered. (94.74%)

26744 of 33909 relevant lines covered (78.87%)

0.79 hits per line