Make 2FA codes valid for 15 minutes (#4149)

cozy · Oct 5, 2023 · 1bccc17 · 1bccc17
2 parents 9001722 + d43cf3a
commit 1bccc17
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/model/instance/auth.go b/model/instance/auth.go
@@ -25,8 +25,8 @@ const (
 )
 
 var twoFactorTOTPOptions = totp.ValidateOpts{
-	Period:    30, // 30s
-	Skew:      10, // 30s +- 10*30s = [-5min; 5,5min]
+	Period:    60, // 60s
+	Skew:      14, // 60s +- 14*60s = [-13min; 15min]
 	Digits:    otp.DigitsSix,
 	Algorithm: otp.AlgorithmSHA256,
 }