nextcloud/server

Clear / refresh 2FA backup codes

Ouverte

#9 036 ouverte le 30 mars 2018

 (9 commentaires) (0 réaction) (0 personne assignée)PHP (4 865 forks)batch import
1. to developenhancementfeature: authenticationgood first issuehelp wanted

Métriques du dépôt

Stars
 (34 953 étoiles)
Métriques de merge PR
 (Métriques PR en attente)

Description

as already mentioned in https://github.com/nextcloud/twofactor_totp/issues/244, maybe just a question... but shouldn't the Backup-Codes be cleared/deleted after an user disables his 2FA?

in the database they are still present, also for users which were completely deleted ages ago.

i'm not sure if this may even become a security issue, especially if a user enables 2FA again...

Guide contributeur