Allow wider window for totp verification (#5811)

As server time and client time may not necessarily match
This commit is contained in:
DW 2020-02-01 21:50:15 -05:00 committed by GitHub
parent faed098b4b
commit d60f549aef

View file

@ -89,7 +89,8 @@ export default async (ctx: Koa.Context) => {
const verified = (speakeasy as any).totp.verify({
secret: profile.twoFactorSecret,
encoding: 'base32',
token: token
token: token,
window: 2
});
if (verified) {