PASSYpw / PASSY

This project has moved to GitLab.com
https://gitlab.com/PASSYpw
GNU General Public License v3.0
14 stars 0 forks source link

Changing password, while two-factor-auth is enabled permanently locks account. #11

Closed Scrumplex closed 7 years ago

Scrumplex commented 7 years ago

If two-factor-authentication is enabled and the user changes the account's password, the account will be locked permanently. Workaround: Delete row in the MySQL table twofactor, which has the userid of the affected user. Fix: On password change -> reencrypt the two-factor private key with the new password.

Scrumplex commented 7 years ago

Fixed in https://github.com/PASSYpw/PASSY/commit/300576baef0fd9c12867f314a85a014e33ac501f