[Koha-bugs] [Bug 30842] Two-factor authentication code should be valid longer

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30842

David Nind <david at davidnind.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |david at davidnind.com

--- Comment #3 from David Nind <david at davidnind.com> ---
Testing notes (koha-testing-docker).

Enabling two-factor authentication (from test plan for Bug 28786):
1. Enable two faction authentication: TwoFactorAuthentication system
preference.
2. Go to your account, click 'More' > 'Manage Two-Factor authentication'.
3. Click Enable, scan the QR code with the app, insert the pin code and
register.
4. Your account now requires 2FA to login!

Notes:
- Used andOTP to test.
- Waited for code to change, then entered old code: success!
- Waited for code to change twice, and then entered old code: fail (as
expected).
- Entered code before it changed: success (as expected)!
- Disabled 2FA and setup again: worked as expected.

>From my experience with 2FA, I've never had any problems with the short period
of time (for other services, not Koha).

-- 
You are receiving this mail because:
You are watching all bug changes.