GUACAMOLE-1146: Merge take configured "totp-period" into account when generating tokens.

This commit is contained in:
Virtually Nick
2020-10-28 16:05:58 -04:00
committed by GitHub

View File

@@ -271,7 +271,8 @@ public class UserVerificationService {
// Get generator based on user's key and provided configuration
TOTPGenerator totp = new TOTPGenerator(key.getSecret(),
confService.getMode(), confService.getDigits());
confService.getMode(), confService.getDigits(),
TOTPGenerator.DEFAULT_START_TIME, confService.getPeriod());
// Verify provided TOTP against value produced by generator
if ((code.equals(totp.generate()) || code.equals(totp.previous()))