sec51 / twofactor

Golang two factor authentication library
ISC License
217 stars 66 forks source link

giles with keys – how to push to prod?! #21

Open jsay-api opened 5 years ago

jsay-api commented 5 years ago

hello, guys! I'd like to use your lib for production, but I can't push files with the keys to repositories due to security reasons. Also keys are regenerated every single time once docker is restarted so otps won't match (as mentioned in previous issue). So for those reasons I can't use your lib in production. Could you please explain why using this encryption with the keys? Is there any reason I'm missing? Any plans to modify it? e.g., it's possible to get keys from Vault and keep them in memory.