search

netzbegruenung / keycloak-mfa-plugins

Keycloak plugins for MFA (enforce MFA, SMS authentication step, native app integration)
Apache License 2.0
71 stars 22 forks source link

Validate input #3

Closed svenseeberg closed 2 years ago

svenseeberg commented 2 years ago

Input entered by users should be limited to [0-9], `,.,+,-,/`.

This should probably to into the processAction method (https://github.com/netzbegruenung/keycloak-2fa-sms-authenticator/blob/main/src/main/java/netzbegruenung/keycloak/authenticator/SmsAuthenticatorSetMobileNumberAction.java#L28)