Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auth TOTP fix #925

Merged
merged 4 commits into from
Sep 29, 2024
Merged

Auth TOTP fix #925

merged 4 commits into from
Sep 29, 2024

Conversation

kszys
Copy link
Contributor

@kszys kszys commented Sep 28, 2024

This PR proposes to add two_factor_validate callback to Auth in order to be able to handle custom two-factor code validation, and in particular handling the case of Time-Based One-Time-Passwords (TOTP).

Two commits are proposed - one to modify the code, and the other to update the documentation.

@kszys
Copy link
Contributor Author

kszys commented Sep 29, 2024

...on a second thought, Massimo - don't merge this PR into master yet.

I think it would be actually useful and user friendly to hide some currently exposed plumbing (such as the session variables, form variable, etc). I just had an idea how to make this better 😜

So let me fix it first, and then we can discuss if needed.

@kszys
Copy link
Contributor Author

kszys commented Sep 29, 2024

Ok - I cleaned-up the code and updated the documentation. I think it is ready now for a review 😄

@mdipierro mdipierro merged commit 997107b into web2py:master Sep 29, 2024
5 checks passed
@kszys kszys deleted the auth_totp_fix branch September 29, 2024 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants