IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

Feature: add a 30 seconds grace window for 2-factor token checks

Browse Source
This commit is contained in:
Jeff Wong 2018-05-15 16:13:21 -07:00
parent 19605e8b0b
commit 74aecdfd9d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/models/concerns/second_factor_manager.rb
View File

@ -27,7 +27,7 @@ module SecondFactorManager
last_used = self.user_second_factor.last_used.to_i last_used = self.user_second_factor.last_used.to_i
end end
authenticated = !token.blank? && totp.verify_with_drift_and_prior(token, 0, last_used) authenticated = !token.blank? && totp.verify_with_drift_and_prior(token, 30, last_used)
self.user_second_factor.update!(last_used: DateTime.now) if authenticated self.user_second_factor.update!(last_used: DateTime.now) if authenticated
!!authenticated !!authenticated
end end