Fix command to disable 2fa for a user (#19150)

* Fix command to disable 2fa for a user

* apply PSR12 code formatting

1 files changed, 12 insertions, 6 deletions

diff --git a/plugins/TwoFactorAuth/Commands/Disable2FAForUser.php b/plugins/TwoFactorAuth/Commands/Disable2FAForUser.php
index 20d8d421a9..e6f2fcec16 100644
--- a/plugins/TwoFactorAuth/Commands/Disable2FAForUser.php
+++ b/plugins/TwoFactorAuth/Commands/Disable2FAForUser.php
@@ -1,15 +1,17 @@
 <?php
+
 /**
  * Matomo - free/libre analytics platform
  *
- * @link https://matomo.org
+ * @link    https://matomo.org
  * @license http://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
  */
 
 namespace Piwik\Plugins\TwoFactorAuth\Commands;
 
-use Piwik\API\Request;
+use Piwik\Container\StaticContainer;
 use Piwik\Plugin\ConsoleCommand;
+use Piwik\Plugins\TwoFactorAuth\TwoFactorAuthentication;
 use Symfony\Component\Console\Input\InputInterface;
 use Symfony\Component\Console\Input\InputOption;
 use Symfony\Component\Console\Output\OutputInterface;
@@ -19,7 +21,10 @@ class Disable2FAForUser extends ConsoleCommand
     protected function configure()
     {
         $this->setName('twofactorauth:disable-2fa-for-user');
-        $this->setDescription('Disable two-factor authentication for a user. Useful if a user loses the device that was used for two-factor authentication. After it was disabled, the user will be able to set it up again.');
+        $this->setDescription(
+            'Disable two-factor authentication for a user. Useful if a user loses the device that was used for'
+            . ' two-factor authentication. After it was disabled, the user will be able to set it up again.'
+        );
         $this->addOption('login', null, InputOption::VALUE_REQUIRED, 'Login of an existing user');
     }
 
@@ -28,9 +33,10 @@ class Disable2FAForUser extends ConsoleCommand
         $this->checkAllRequiredOptionsAreNotEmpty($input);
         $login = $input->getOption('login');
 
-        Request::processRequest('TwoFactorAuth.resetTwoFactorAuth', array(
-            'userLogin' => $login
-        ));
+        // Note: We can't use API here, as the API method would require a password confirmation
+        $t2f = StaticContainer::get(TwoFactorAuthentication::class);
+        $t2f->disable2FAforUser($login);
+
         $message = sprintf('<info>Disabled two-factor authentication for user: %s</info>', $login);
         $output->writeln($message);
     }