diff --git a/app.py b/app.py index f2b7d31..64def12 100755 --- a/app.py +++ b/app.py @@ -1922,8 +1922,12 @@ def admin_users_reset_password(email): temp_password = secrets.choice(string.ascii_lowercase) + secrets.choice(string.ascii_uppercase) + secrets.choice(string.digits) + secrets.token_hex(4) users[email]["password_hash"] = generate_password_hash(temp_password) users[email]["must_change_password"] = True + users[email]["mfa_enabled"] = False + users[email]["mfa_secret"] = "" + users[email]["mfa_recovery_codes"] = [] + users[email]["trusted_devices"] = [] save_users(users) - add_history_entry("user_password_reset", f"Passwort für User '{email}' zurückgesetzt", current_user.email) + add_history_entry("user_password_reset", f"Passwort für User '{email}' zurückgesetzt (MFA deaktiviert)", current_user.email) return redirect(f"/admin/users?reset={email}&temp={temp_password}")