GUACAMOLE-1146: Take configured "totp-period" into account when generating tokens.

This commit is contained in:
Michael Jumper
2020-10-28 12:27:09 -07:00
parent 23eaaa9132
commit f0c96c1e1e

View File

@@ -271,7 +271,8 @@ public class UserVerificationService {
// Get generator based on user's key and provided configuration
TOTPGenerator totp = new TOTPGenerator(key.getSecret(),
confService.getMode(), confService.getDigits());
confService.getMode(), confService.getDigits(),
TOTPGenerator.DEFAULT_START_TIME, confService.getPeriod());
// Verify provided TOTP against value produced by generator
if ((code.equals(totp.generate()) || code.equals(totp.previous()))