Cannot change member verification level without enabling 2FA, even when 2FA requirement is disabled

(#130) Bug Confirmed moderation security

Thread

Comment by @automataevox
RexSystem 1 vote originally by @automataevox on GitHub
PATCH https://web.fluxer.app/api/v1/guilds/%3Cguild-id/%3E 400 Bad Request
// request

{
    "verification_level": 1,
    "nsfw_level": 0,
    "explicit_content_filter": 1,
    "mfa_level": 0,
    "password": "REDACTED"
}
// response

{
  "code": "INVALID_FORM_BODY",
  "message": "Invalid form body.",
  "errors": [
    {
      "path": "mfa_level",
      "message": "You must enable 2FA on your account before requiring it for moderators.",
      "code": "MUST_ENABLE_2FA_BEFORE_REQUIRING_FOR_MODS"
    }
  ]
}
In request MFA is not enabled, so it's server-side validation failure