mirror of
https://github.com/snipe/snipe-it.git
synced 2025-02-21 03:15:45 -08:00
Harden PragmaRX secret to 32 bytes (#2859)
This is needed at all but that extra security is always good.
This commit is contained in:
parent
140bac2b53
commit
10ea5daabd
|
@ -176,7 +176,7 @@ class AuthController extends Controller
|
|||
$google2fa = app()->make('PragmaRX\Google2FA\Contracts\Google2FA');
|
||||
|
||||
if ($user->two_factor_secret=='') {
|
||||
$user->two_factor_secret = $google2fa->generateSecretKey();
|
||||
$user->two_factor_secret = $google2fa->generateSecretKey(32);
|
||||
$user->save();
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in a new issue