8 Commits

Author	SHA1	Message	Date
Daniel García	e274af6e3d	Print current server time when failing TOTP, and use chrono as the rest of the server	2019-12-27 18:42:14 +01:00
BlackDex	3f6809bcdf	Fixed issue/request #705 ... Added a config option to disable time drifted totp codes. Default is false, since this is what the RFC recommends.	2019-11-07 17:11:29 +01:00
BlackDex	603a964579	Fixed issue #663. ... During the 2fa activation there is no twofactor record yet. Changed the layout a bit so that it will generate a new twofactor record when it does not exists yet. Else it will just update the already existing record.	2019-10-14 00:32:44 +02:00
BlackDex	9466f02696	Recoded TOTP time drift validation	2019-10-12 15:28:28 +02:00
BlackDex	ebf40099f2	Updated authenticator TOTP ... - Added security check for previouse used codes - Allow TOTP codes with 1 step back and forward when there is a time drift. This means in total 3 codes could be valid. But only newer codes then the previouse used codes are excepted after that.	2019-10-10 17:32:20 +02:00
vpl	6d460b44b0	Use saved token for email 2fa codes	2019-08-04 17:21:57 +02:00
vpl	efd8d9f528	Remove some unused imports, unneeded mut variables	2019-08-04 16:56:41 +02:00
vpl	29aedd388e	Add email code logic and move two_factor into separate modules	2019-08-04 16:56:41 +02:00