don't show otpinfo on trusted hosts

phoenixctms · Apr 24, 2024 · 3c38e88 · 3c38e88
1 parent 93f96b6
commit 3c38e88
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/web/src/main/java/org/phoenixctms/ctsms/web/model/SessionScopeBean.java b/web/src/main/java/org/phoenixctms/ctsms/web/model/SessionScopeBean.java
@@ -1215,9 +1215,9 @@ public synchronized String login() {
 			auth.setLocalPassword(null);
 			clearAuthenticationFailedMessage();
 			if (logon.getEnable2fa()
-					&& (logon.getShowOtpRegistrationInfo()
-							|| Settings.getBoolean(SettingCodes.TRUSTED_HOST_2FA_REQUIRED, Bundle.SETTINGS, DefaultSettings.TRUSTED_HOST_2FA_REQUIRED)
-							|| !WebUtil.isTrustedHost())) {
+					&& (logon.getShowOtpRegistrationInfo() &&
+							(Settings.getBoolean(SettingCodes.TRUSTED_HOST_2FA_REQUIRED, Bundle.SETTINGS, DefaultSettings.TRUSTED_HOST_2FA_REQUIRED)
+									|| !WebUtil.isTrustedHost()))) {
 				otpRequired = true;
 				outcome = getLoginOutcome(false);
 			} else {