feat(security): obfuscate error messages in anonymous API

This commit is contained in:
InfinityPacer
2024-10-08 01:51:45 +08:00
parent d7da2e133a
commit 284082741e

View File

@@ -139,7 +139,7 @@ def otp_disable(
def otp_enable(userid: str, db: Session = Depends(get_db)) -> Any:
user: User = User.get_by_name(db, userid)
if not user:
return schemas.Response(success=False, message="用户不存在")
return schemas.Response(success=False)
return schemas.Response(success=user.is_otp)