GUACAMOLE-1146: Take configured "totp-period" into account when generating tokens.
This commit is contained in:
1 parent
23eaaa9132
commit
f0c96c1e1e
1 file changed
+2
-1
+2
-1
@@ -271,7 +271,8 @@ public class UserVerificationService {
|
||||
|
||||
// Get generator based on user's key and provided configuration
|
||||
TOTPGenerator totp = new TOTPGenerator(key.getSecret(),
|
||||
confService.getMode(), confService.getDigits());
|
||||
confService.getMode(), confService.getDigits(),
|
||||
TOTPGenerator.DEFAULT_START_TIME, confService.getPeriod());
|
||||
|
||||
// Verify provided TOTP against value produced by generator
|
||||
if ((code.equals(totp.generate()) || code.equals(totp.previous()))
|
||||
|
||||
Reference in new issue
Block a user