Code

Encrypt TOTP secrets.#389

Code

Open

soatok wants to merge 9 commits intoWordPress:masterWordPress/two-factor:masterfrom soatok:soatok-encrypt-2fa-secretssoatok/two-factor:soatok-encrypt-2fa-secretsCopy head branch name to clipboard

+580-2

Commits

Commits on Oct 19, 2022

• Encrypt TOTP secrets.

  Show description for 4fd044a
  

  soatok

  authored and

  iandunn

  committed
  4fd044a

Commits on Oct 20, 2022

• Pull the utility functions into the abstract provider class.

  Show description for 78531cc
  

  georgestephanis

  authored and

  iandunn

  committed
  78531cc

• Correct unit test reference to constant.

  Show description for 4162463
  

  georgestephanis

  authored and

  iandunn

  committed
  4162463

• Require RandomCompat_substr() to avoid fatal error

  Show description for b2af881
  iandunn

  committed
  b2af881

• Use wp_salt() instead of SECURE_AUTH_SALT for compatibility.

  Show description for 8419e43
  

  iandunn

  and

  dd32

  committed
  8419e43

Commits on Oct 21, 2022

• Remove final because private methods can't be overridden

  iandunn

  committed
  57065ca

• [WIP] Add dedicated TOTP encryption salt

  iandunn

  committed
  8e7e38c

Commits on Oct 25, 2022

• wip - add warnings if salt not defined

  iandunn

  committed
  2bcc7ed

• wip - catch decrypt fatal. need to ensure good UX

  iandunn

  committed
  e7cd00a