search

alexandregz / twofactor_gauthenticator

This RoundCube plugin adds the 2-step verification(OTP) to the login proccess
MIT License
216 stars 76 forks source link

Use otp_des_key instead of roundcube's des_key #136

Open aerth opened 3 years ago

aerth commented 3 years ago

I don't know what I'm doing. This probably needs some sort of additional changes.

I think it would be a good idea to use a separate key than roundcube's login key.

So this adds that to twofactor_gauthenticator.

Again, I don't know what I'm doing in php. 🤣

This hopefully also changes the default config fields where all users can optionally enable 2fa themselves. This PR keeps the old config fields as examples (commented)

This way, its ready to use after generating a new key.

I use a reverse proxy so the previous whitelist didn't make sense so I guess it works as null, which makes sense as a sane default.