external/mailinabox
1
0
Fork 0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2026-03-05 15:57:23 +01:00
Code Issues Releases Wiki Activity

Add a totpMruTokenTime value to record the time when the mru token was used

Browse Source 
Use the totpMruTokenTime as the id to uniquely identify a totp entry
This commit is contained in:
downtownallday
2020-09-30 11:00:58 -04:00
parent a5ebd07549
commit 100acb119b
6 changed files with 61 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
conf/mfa-totp.schema
View File

@@ -31,13 +31,23 @@ attributetype ( MiabLDAPmfaAttributeType:2
X-ORDERED 'VALUES'
EQUALITY caseExactIA5Match )
# the time in nanoseconds since the epoch when the mru token was last
# used. the time will also be set when a new entry is created even if
# the corresponding mru token is blank
attributetype ( MiabLDAPmfaAttributeType:3
DESC 'TOTP last token used time'
NAME 'totpMruTokenTime'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
X-ORDERED 'VALUES'
EQUALITY integerMatch )
# The label is currently any text supplied by the user, which is used
# as a reminder of where the secret is stored when logging in (where
# the authenticator app is, that holds the secret). eg "my samsung
# phone"
attributetype ( MiabLDAPmfaAttributeType:3
attributetype ( MiabLDAPmfaAttributeType:4
DESC 'TOTP device label'
NAME 'totpLabel'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
@@ -52,4 +62,4 @@ objectClass ( MiabLDAPmfaObjectClass:1
DESC 'MiaB-LDAP TOTP settings for a user'
SUP top
AUXILIARY
MUST ( totpSecret $ totpMruToken $ totpLabel ) )
MUST ( totpSecret $ totpMruToken $ totpMruTokenTime $ totpLabel ) )