Bug 30842: 2FA - Allow at least one old TOTP
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Wed, 25 May 2022 08:04:58 +0000 (10:04 +0200)
committerTomas Cohen Arazi <tomascohen@theke.io>
Wed, 1 Jun 2022 19:14:42 +0000 (16:14 -0300)
commitf6110ce4170ced8ba246e295cc547c9794566ef1
tree769f7f5a579cda9dbd5a551cd3d65619206adba1
parent17b7ae56c539bfaaf2dae75f6855e9cda13ec904
Bug 30842: 2FA - Allow at least one old TOTP

We allow one old token when we are setting the two-factor auth, we
should reuse the same settings when validation the authentication
itself.

Test plan:
Setup 2FA for your logged-in user
Logout/Login
Have a look at the code and wait for 30 sec before using it (< 1min
however)

Signed-off-by: David Nind <david@davidnind.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
C4/Auth.pm