LimboAuth icon indicating copy to clipboard operation
LimboAuth copied to clipboard

[BUG] Saving TOTP recovery codes is not implemented

Open Brikster opened this issue 3 years ago • 0 comments

Describe the bug LimboAuth generates TOTP scratch codes, but doesn't store them anywhere (see there). dev.samstevens.totp.recovery.RecoveryCodeGenerator just provides N random strings, that should be stored yourself. TOTP doesn't describe recovery codes, it's a mechanism that is outside the scope of TOTP.

Possible solution Add table column or separate table for storing generated recovery codes.

p.s. I think such long alphanumeric strings for recovery codes is a bad idea for a Minecraft server. It might be better to generate small integers, such it does GoogleAuth.

Brikster avatar Jul 27 '22 13:07 Brikster