mirror of
https://github.com/cwinfo/powerdns-admin.git
synced 2024-11-08 14:40:27 +00:00
846c03f154
PyOTP's totp.verify defaults to the valid_window of zero, which means it will reject valid codes, if submitted just past the 30 sec window. It also means, users will run into authentication issues very quickly if their phones time-sync isn't perfect. Therefore valid_window should at the very least be 1 or more, settting it higher trades security for robustness, especially with regard to time desync issues. |
||
|---|---|---|
| .. | ||
| lib | ||
| models | ||
| routes | ||
| services | ||
| static | ||
| templates | ||
| __init__.py | ||
| assets.py | ||
| decorators.py | ||
| default_config.py | ||
| swagger-spec.yaml | ||