two_factor_authentication

13 Tags

466 KiB

Tree: ffbad70848

Author	SHA1	Message	Date
Sam Clegg	eed1bf62a1	Add support for directly delivered OTP codes Direct OTP codes are ones that are delivered directly to the user (e.g. SMS) via send_two_factor_authentication_code. These are randomly generated, short lived, and stored directly in the database. TOTP (and the rotp gem) is now only enabled for those user that have a shared secret (user.create_otp_secret).	9 years ago
Moncef Belyamani	d2b6d39d24	Add support for OTP secret key encryption Why: To provide an additional layer of security. The TOTP spec (RFC 6238) recommends encrypting the keys. http://tools.ietf.org/html/rfc6238 How: Borrow the encryption code from the `attr_encrypted` gem and use it to encrypt and decrypt the `otp_secret_key` attribute. Allow users to add encryption by passing in `encrypted: true` to `has_one_time_password`. This provides backwards-compatibility for existing users of the gem. See the README updates for more detailed instructions for both new and existing users.	10 years ago
Ross Kaffenberger	c58640c6d2	adds integration spec to ensure authentication code is sent on sign in	12 years ago
Ross Kaffenberger	f46a62720c	happy path feature specs for two factor auth	12 years ago
Ross Kaffenberger	6ea4db49fe	rename rails app in spec directory	12 years ago