GET verify_authy_installation should redirect if authy_id is nil

[DannyBen]

GET verify_authy_installation should redirect if authy_id is nil

[philnash]

Agreed. There's no reason not to fix it though!

[philnash]

This is an interesting point. If a user does send themselves to the verify page without enabling authy all they can do is submit a verification that will fail.

I guess you're right that we could happily redirect them if they don't have an authy_id. Same for the POST_verify_authy_installation endpoint too.

[DannyBen]

Yup. Although it is not a big deal, since a) they have to intentionally go to that page and b) no real harm is done, we always prefer to not allow URLs to be accessed, unless they can fulfill their purpose, and they are allowed - this is especially true in all things that are auth(entication|orization) related.

[DannyBen]

Thanks for the fixes blitz! Cant wait for the new version.