#1141 Fixes to TOTP implementation

- Revert back to SHA1 as HMAC hash function so that it works with Google authenticator - Add message to user to tell him to run /2fa confirm to add a TOTP code
2018-04-22 11:13:27 +02:00
parent de0e588cf3
commit 29ac3a7022
39 changed files with 510 additions and 149 deletions
@@ -132,6 +132,7 @@ verification:

 two_factor:
  code_created: '&2Your secret code is %code. You can scan it from here %url'
+  confirmation_required: 'Please confirm your code with /2fa confirm <code>'
  code_required: 'Please submit your two-factor authentication code with /2fa code <code>'
  already_enabled: 'Two-factor authentication is already enabled for your account!'
  enable_error_no_code: 'No 2fa key has been generated for you or it has expired. Please run /2fa add'