Bug 30843 - TOTP expiration delay should be configurable
Summary: TOTP expiration delay should be configurable
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Authentication (show other bugs)
Version: unspecified
Hardware: All All
: P5 - low enhancement (vote)
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on: 30842
Blocks:
  Show dependency treegraph
 
Reported: 2022-05-25 08:09 UTC by Jonathan Druart
Modified: 2022-05-27 06:03 UTC (History)
3 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jonathan Druart 2022-05-25 08:09:14 UTC
It's valid 60 seconds, it could be a configuration option.
Comment 1 Marcel de Rooy 2022-05-27 06:03:26 UTC
(In reply to Jonathan Druart from comment #0)
> It's valid 60 seconds, it could be a configuration option.

The interval is default 30 seconds in GoogleAuth.
30842 adds 1 older token.
Note that GoogleAuth does not take the interval in the new method, but allows you to pass interval both to ->code as well as ->verify.