[DiscordArchive] And I just found a new interesting table... ``secret_digest``?
[DiscordArchive] And I just found a new interesting table... ``secret_digest``?
Archived author: Deleted User • Posted: 2019-08-16T14:21:21.697000+00:00
Original source
And I just found a new interesting table... ``secret_digest``?
Archived author: Deleted User • Posted: 2019-08-16T14:21:42.455000+00:00
Original source
There's no documentation on it, and I've never seen it before.
Archived author: Millarras • Posted: 2019-08-16T14:21:46.523000+00:00
Original source
for two-factor authentication afaik
Archived author: Deleted User • Posted: 2019-08-16T14:22:01.990000+00:00
Original source
Ah
Archived author: Millarras • Posted: 2019-08-16T14:22:11.175000+00:00
Original source
https://github.com/TrinityCore/TrinityCore/pull/23633
[Embed: [3.3.5] Somewhat more secure storage of TOTP PSK by Treeston · Pu...]
We currently implement TOTP 2FA (think Google Authenticator) in TC. That's good.
We currently store pre-shared secrets in the database in plain. If a backup of your auth database goes place...
https://github.com/TrinityCore/TrinityCore/pull/23633
Archived author: Millarras • Posted: 2019-08-16T14:22:29.585000+00:00
Original source
nvm, here's the actual commit https://github.com/TrinityCore/TrinityCo...3607be9ea7
[Embed: [3.3.5] Core/Authserver: TOTP rewrite: (PR #23633) · TrinityCore/...]
- Proper management commands (.account 2fa)
- Secrets can now be encrypted (set TOTPTokenSecret in .conf)
- Secret now stored in binary
- Argon2 and AES primitives
- Base32/64 support
https://github.com/TrinityCore/TrinityCo...3607be9ea7
Archived author: Deleted User • Posted: 2019-08-16T14:47:23.846000+00:00
Original source
Thanks