Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Harden 2FA/TOTP implementation according to rfc6238 (part 3) #642

Merged
merged 3 commits into from
Oct 16, 2021

Conversation

andreasbrett
Copy link
Contributor

implements issue 3 in #640

override default values: window=1, window size=30 (see louislam#640)
@deefdragon
Copy link
Contributor

deefdragon commented Oct 10, 2021

Logically sound. Did you run the linter?

@andreasbrett
Copy link
Contributor Author

Logically sound. Did you run the linter?

To be honest... I didn't pay much attention to the linter as .eslintrc.js is configured for unix linebreaks and ESlint nagged about every line. Linted now.

server/server.js Outdated Show resolved Hide resolved
// 2FA / notp verification defaults
const twofa_verification_opts = {
"window": 1,
"time": 30
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
"time": 30
"time": 30,

@louislam louislam added this to the 1.9.0 milestone Oct 13, 2021
@louislam louislam merged commit 6ff3cb2 into louislam:master Oct 16, 2021
@andreasbrett andreasbrett deleted the patch-2 branch November 5, 2021 08:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants