nextcloud/server

Clear / refresh 2FA backup codes

オープン

#9,036 opened on 2018/03/30

 (9 件のコメント) (0 件のリアクション) (0 人の担当者)PHP (4,865 件のフォーク)batch import
1. to developenhancementfeature: authenticationgood first issuehelp wanted

Repository metrics

Stars
 (34,953 個のスター)
PR merge metrics
 (PR metrics pending)

説明

as already mentioned in https://github.com/nextcloud/twofactor_totp/issues/244, maybe just a question... but shouldn't the Backup-Codes be cleared/deleted after an user disables his 2FA?

in the database they are still present, also for users which were completely deleted ages ago.

i'm not sure if this may even become a security issue, especially if a user enables 2FA again...

コントリビューターガイド