discourse/spec/support/session_controller_helper_routes.rb

# frozen_string_literal: true

module SessionControllerExtension
  def self.included(base)
    base.skip_before_action :check_xhr, only: %i[test_second_factor_restricted_route]
  end

  def test_second_factor_restricted_route
    result =
      run_second_factor!(TestSecondFactorAction) do |manager|
        manager.allow_backup_codes! if params[:allow_backup_codes]
      end
    if result.no_second_factors_enabled?
      render json: { result: "no_second_factors_enabled" }
    else
      render json: { result: "second_factor_auth_completed" }
    end
  end
end

SessionController.class_eval { include SessionControllerExtension }