Needs work
Project:
TFA Email OTP Plugin
Version:
1.0.0-beta1
Component:
Code
Priority:
Normal
Category:
Feature request
Assigned:
Unassigned
Reporter:
Created:
12 Mar 2024 at 11:30 UTC
Updated:
12 Mar 2024 at 22:58 UTC
Jump to comment: Most recent
Comments
Comment #3
mingsongThanks for the patch(fork).
I have a question about the following code,
This will provide a possibility to have a validity period that is not included in the allowed list from line 354 in /src/Plugin/TfaValidation/TfaEmailOtpValidation.php
https://git.drupalcode.org/issue/tfa_email_otp-3427331/-/blob/a8f1157a53...
The allowed periods are
An unexpected long period of validity time is a security concern. That is why the allowed options is hard-coded.
Comment #4
mingsong