Cong Liu comments

Repositories
Issues
Comments

Results 2 comments of


                                            Cong Liu

Allow TOTP as 2FA alternative if hardware security key can't be used

Having a similar issue with the Desktop app (version: 3.195.13). My current workaround is to use the recovery code to bypass the security key authentication which does not work properly...

Allow TOTP as 2FA alternative if hardware security key can't be used

I think the problem comes from [this line](https://github.com/standardnotes/app/blob/d3ce536c1a5419634538e26ccb3e5b08ad1e6f53/packages/web/src/javascripts/Components/ChallengeModal/U2FPromptIframeContainer.tsx#L11) which hardcoded the **U2F_IFRAME_ORIGIN** variable. Apparently my own web app is hosted on a different domain than the one hardcoded in the...