Felix Spöttel dcb93d071c Add TOTP secret to user_key hash ...

thanks @downtownallday
* this invalidates all user_keys after TOTP status is changed for user
* after changing TOTP state, a login is required
* due to the forced login, we can't and don't need to store the code used for setup in `mru_code`

2020-09-12 16:34:06 +02:00

14 KiB

Raw Blame History

View Raw