twofas / 2fas-ios

Source code for 2FAS iOS app
GNU General Public License v3.0
532 stars 39 forks source link

Twitch totp doesnt work because 2FAS doesnt support 10 second refresh time #40

Closed slrgt closed 8 months ago

slrgt commented 1 year ago

Twitch uses a 7 digit code and 10 second refresh time so it doesn't work with 2FAS. I'm coming from raivo and it didnt detect it from the json (it said imported 45 of 45 tokens even though there was 46 tokens) and it's impossible to manually add it because there's no option for 10 second refresh times

adocyn commented 1 year ago

Hi, @slrgt, I've checked it and it's actually 20 seconds and yes, 7 digits. But we have to check if it's even a standard TOTP algorithm. E.g. Steam has it's own, totally non-standard algorithm. It seems that it's a great way to lock users only to their own or associated 2FA app.

slrgt commented 1 year ago

oh I think it's not non-standard since it works on other 2FA apps like Raivo but I'm not positive. Anyways thanks for the reply and the project!

TickDracy commented 11 months ago

It seems that it's a great way to lock users only to their own or associated 2FA app.

I'm sorry, but I will have to disagree here. On Twitch's page, they even advertise using Google Authenticator. Seems more like a flaw in the lack of flexibility of 2FAS than anything else.

2fas-com commented 8 months ago

We checked, and Twitch is functioning properly. The 7-character code is used for SMS messages. However, if you wish to use the 2FAS Auth, you need to activate it as shown in the pictures below.

step1 step2 step3