Last modified: 2014-05-11 09:34:40 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T55194, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 53194 - Make authentication window size and leniency configurable
Make authentication window size and leniency configurable
Status: PATCH_TO_REVIEW
Product: MediaWiki extensions
Classification: Unclassified
OATHAuth (Other open bugs)
master
All All
: Unprioritized enhancement (vote)
: ---
Assigned To: Ryan Lane
:
Depends on:
Blocks: 53192
  Show dependency treegraph
 
Reported: 2013-08-22 03:16 UTC by Tyler Romeo
Modified: 2014-05-11 09:34 UTC (History)
0 users

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Tyler Romeo 2013-08-22 03:16:56 UTC
Right now the window size is hardcoded to (I think) 30 seconds and the leniency is hardcoded to 4 windows. They should be configurable.
Comment 1 Tyler Romeo 2013-08-22 03:26:28 UTC
I should also note that the TOTP RFC recommends using a window size of 30 seconds and a leniency of 1 window in each direction. If WMF uses NTP on their servers, that should not be an issue since most TOTP apps have time synchronization.
Comment 2 Gerrit Notification Bot 2014-05-11 09:34:38 UTC
Change 132784 had a related patch set uploaded by Parent5446:
Make authentication window size and leniency configurable

https://gerrit.wikimedia.org/r/132784

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links