twofas / 2fas-android

Source code for 2FAS Android app
GNU General Public License v3.0
975 stars 69 forks source link

feat: 2fas should also use browser extension name along with domain name to correctly select the correct totp code along for a domain #153

Open sathishkannan162 opened 4 months ago

sathishkannan162 commented 4 months ago

Feature description

I use two chrome profiles. One for my work and one for personal. I use aws on both of the them. The chrome with personal profile will have my personal aws account and the chrome with work profile will have my work account. I use 2fas browser extension on both of them. I want the browser extension to give me the otp for my personal aws account when I use my personal profile and my work account when I use my work profile. Currently this is not possible as otps are shared to browser extensions based only on the domain name of the totp label rather than the browser extension that is requesting it.

May be you can add another field like extension_id to uniquely determine the totp label that should be send to the extension along with the domain name.

This will be also helpful to others who are using two different pcs for their work and personal use.

Motivation

I faced an issue after I pressed save choice while accessing my personal aws totp label from my personal chrome profile. Then I was unable to get the totp for my aws work profile as the browser extension in other profile was giving me the totp for aws personal profile.

Acknowledgements

sathishkannan162 commented 4 months ago

Any Update on this?