Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Validate a TOTP code before saving it (#1055)
In order to do this, I had to remove the very old and unmaintainted `otplib` and replace it with the well-maintained [otpauth](https://www.npmjs.com/package/otpauth). I kept the parameters the same, but if there is something only slightly off between the two libraries, this could cause a major headache. I am unsure on how to test this though, or if we can provide some sort of migration for this. The reason for the upgrade is two-fold: 1. As I said, the original library was unmaintained 2. It's verification mechanism relied on a Buffer class that, as far as I can tell, can't work without some `require` statements that are missing from the library's source files. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eugene <inbox@null.page>
- Loading branch information