attr_encrypted via encryption throwing "must specify iv" error

[pkemble]

I have just a very basic devise single user app and i'm trying to implement 2fa. I have the following:

def qrcode(user) issuer = 'outlet-dev' #TODO environment specific here label = "#{issuer}:#{current_user.email}" if user.encrypted_otp_secret.nil? user.encrypted_otp_secret = User.generate_otp_secret user.save! end qrcode = user.otp_provisioning_uri(label, issuer: issuer) end

I get a value stored in the 'encrypted_otp_secret' column, but the other two remain empty (encrypted_otp_secret_iv / _salt) which causes the user.otp_provisioning_uri(label, issuer: issuer) part to fail.

Are the iv and salt values supposed to be automatically filled?

devise 4.8.1 devise-two-factor 4.0.1 attr_encrypted 3.1.0 rails 6.1.4.4 ruby 3.0.0

Thanks!

[doconnor-clintel]

This is a bit of a pain. You can redefine attr_encrypted and manually specify an iv:

When you do:

  devise :two_factor_authenticatable,  otp_secret_encryption_key: ......

It does

attr_encrypted :otp_secret, key: '(your key from before)', mode: .... but misses out an octal 12 bit iv: param.

Luckily, you can define this one the model.