feat: totp enrollment is valid for 2 period like totp signin

numerique-gouv · Dec 20, 2024 · 84f8592 · 84f8592
1 parent 27e5927
commit 84f8592
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/managers/totp.ts b/src/managers/totp.ts
@@ -57,7 +57,7 @@ export const confirmAuthenticatorAppRegistration = async (
     throw new UserNotFoundError();
   }
 
-  if (!temporaryTotpKey || !validateToken(temporaryTotpKey, totpToken)) {
+  if (!temporaryTotpKey || !validateToken(temporaryTotpKey, totpToken, 2)) {
     throw new InvalidTotpTokenError();
   }