nextcloud/server

Clear / refresh 2FA backup codes

开放

#9,036 创建于 2018年3月30日

 (9 条评论) (0 个反应) (0 位负责人)PHP (4,865 个派生)batch import
1. to developenhancementfeature: authenticationgood first issuehelp wanted

仓库指标

星标
 (34,953 个星标)
PR 合并指标
 (PR 指标待抓取)

描述

as already mentioned in https://github.com/nextcloud/twofactor_totp/issues/244, maybe just a question... but shouldn't the Backup-Codes be cleared/deleted after an user disables his 2FA?

in the database they are still present, also for users which were completely deleted ages ago.

i'm not sure if this may even become a security issue, especially if a user enables 2FA again...

贡献者指南