zedfrigg/bookwyrm
1
0
Fork 0
Code Activity

Specify TOTP validity window in settings.py

Browse source
This commit is contained in:
Chris Young 2023-02-13 15:17:54 +00:00
parent 5bae00b3fe
commit 867b2ff542
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
bookwyrm/forms/landing.py
View file

@ -8,6 +8,7 @@ import pyotp
from bookwyrm import models
from bookwyrm.settings import DOMAIN
from bookwyrm.settings import TWO_FACTOR_LOGIN_VALIDITY_WINDOW
from .custom_form import CustomForm
@ -108,7 +109,7 @@ class Confirm2FAForm(CustomForm):
otp = self.data.get("otp")
totp = pyotp.TOTP(self.instance.otp_secret)
if not totp.verify(otp, valid_window=2):
if not totp.verify(otp, valid_window=TWO_FACTOR_LOGIN_VALIDITY_WINDOW):
if self.instance.hotp_secret:
# maybe it's a backup code?