booths / google-authenticator-apache-module

Automatically exported from code.google.com/p/google-authenticator-apache-module
0 stars 0 forks source link

Scratch codes unsupported #1

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
Need to support use of scratch codes, and invalidation of codes after use

Original issue reported on code.google.com by bkgood...@gmail.com on 5 May 2011 at 5:18

GoogleCodeExporter commented 8 years ago
Changed to "Enhancement".

Original comment by bkgood...@gmail.com on 2 Apr 2013 at 6:07

GoogleCodeExporter commented 8 years ago
Due to the way Apache authentication handles Digest Authentication - I don't 
know that we will be able to support one-time codes with digest authentication. 
The reason being is that the get_realm_hash function requires the auth module 
to return "what the hash should be" - whereas with one-time-codes, a valid hash 
could consist of one of *many* different values.

Original comment by bkgood...@gmail.com on 10 May 2013 at 3:29