User carol can login without TOTP after occ twofactorauth:enable carol

owncloud / twofactor_totp

🔑 Second factor TOTP (Google Authenticator) provider for ownCloud

GNU Affero General Public License v3.0

9 stars 9 forks source link

Open jnweiger opened 8 months ago

jnweiger commented 8 months ago

Seen with towfactor_totp 0.8.1 (probably not a regression)

before user carol logs in for the first time, run occ twofactorauth:enable carol
when carol logs in, no TOTP is needed. BAD.
the personal security settings show TOTP as disabled.

Probably related to #308