View Issue Details

IDProjectCategoryView StatusLast Update
0007097Anastasisanastasis-webuipublic2022-09-26 18:50
ReporterChristian Grothoff Assigned Tosebasjm Due Date
PrioritynormalSeverityminorReproducibilityN/A
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Target Version0.3.0Fixed in Version0.3.0 
Summary0007097: Google TOTP can only do 6 digits
DescriptionWe had one user that used Google TOTP, which can only generate 6 digits. We need to provide guidance that an app that implements TOTP completely (like the ones in F-Droid) must be used because 8 digits is really needed for baseline security here.
Right now, the user basically was stumped as to why we did not accept their 6 digit code.
TagsNo tags attached.

Activities

Christian Grothoff

2021-11-16 13:34

manager   ~0018484

anastasis.gtk 696a49a..f2fbc38 modifies anastasis-gtk to point out that the code must be 8-digits, that Google's TOTP is not working, and suggests the use of FreeOTP+. The WebUI should be modified in the same way.

Issue History

Date ModifiedUsernameFieldChange
2021-11-10 20:57Christian GrothoffNew Issue
2021-11-16 13:34Christian GrothoffNote Added: 0018484
2021-11-16 13:34Christian GrothoffCategoryauthentication methods => anastasis-webui
2021-11-16 13:34Christian GrothoffAssigned To => sebasjm
2021-11-16 13:34Christian GrothoffStatusnew => assigned
2022-01-24 19:44sebasjmStatusassigned => resolved
2022-01-24 19:44sebasjmResolutionopen => fixed
2022-09-26 18:49Christian GrothoffFixed in Version => 0.3.0
2022-09-26 18:49Christian GrothoffTarget Version => 0.3.0
2022-09-26 18:50Christian GrothoffStatusresolved => closed