Bug 30843

Summary: TOTP expiration delay should be configurable
Product: Koha Reporter: Jonathan Druart <jonathan.druart+koha>
Component: AuthenticationAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: dcook, dpavlin, m.de.rooy
Version: unspecified   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Bug Depends on: 30842    
Bug Blocks:    

Description Jonathan Druart 2022-05-25 08:09:14 UTC
It's valid 60 seconds, it could be a configuration option.
Comment 1 Marcel de Rooy 2022-05-27 06:03:26 UTC
(In reply to Jonathan Druart from comment #0)
> It's valid 60 seconds, it could be a configuration option.

The interval is default 30 seconds in GoogleAuth.
30842 adds 1 older token.
Note that GoogleAuth does not take the interval in the new method, but allows you to pass interval both to ->code as well as ->verify.