Feature request: session expiration based on src-ip/src-port

NHAS / wag

Simple Wireguard 2FA

BSD 3-Clause "New" or "Revised" License

508 stars 27 forks source link

Feature request: session expiration based on src-ip/src-port #20

Closed grisu-cl closed 1 year ago

grisu-cl commented 1 year ago

hi,

first, thanks for the project ... i like wireguard - and MFA on top of it ... great

do you think it would be a good idea to use the client-src-IP/port as a parameter to timeout a session? means: if client-src-ip or client-src-port changes a re-authentication is requrired

the solution with a time-based session-timout ... hmm ...

NHAS commented 1 year ago

The project already uses client-src-IP & port to expire sessions. If a clients external IP address and transmitting port (wireguard) changes then they are required to reauthenticate.