Dominik Kwiatek
|
5dd920eba2
|
Allow recovery codes to be used to sign in in place of a OTP
|
2020-11-01 18:29:11 +01:00 |
|
Dominik Kwiatek
|
d20f527d8c
|
Add drift period
|
2020-10-24 00:24:04 +02:00 |
|
Dominik Kwiatek
|
702156258c
|
Remove user/sessions#two_factor_entry
|
2020-10-23 21:00:06 +02:00 |
|
Dominik Kwiatek
|
66cccbb5d6
|
Use the same string for 2FA failures
|
2020-10-23 20:58:42 +02:00 |
|
Dominik Kwiatek
|
d7a1750694
|
Implement @nilsding's review changes
|
2020-10-23 20:45:06 +02:00 |
|
Dominik Kwiatek
|
00da21a13d
|
Redirect away from two factor entry page if no target user is set in session
|
2020-10-19 12:20:44 +02:00 |
|
Dominik Kwiatek
|
25410e111d
|
Fix OTP auth triggering for users who haven't set it up
I thought I could be clever by using a null secret key as an indicator of it being disabled
|
2020-10-18 11:39:28 +02:00 |
|
Dominik Kwiatek
|
141ff59f63
|
Implement Two Factor Authentication
|
2020-10-18 10:39:46 +02:00 |