Increase length of OTP secret

2024-09-27 12:05:23 +02:00 · 2024-09-27 12:05:23 +02:00 · c000dff08a
parent 33e07454f2
commit c000dff08a
1 changed files with 2 additions and 1 deletions
--- a/app/models/user.rb
+++ b/app/models/user.rb
@ -64,7 +64,8 @@ class User < ApplicationRecord
  ACTIVE_DURATION = ENV.fetch('USER_ACTIVE_DAYS', 7).to_i.days.freeze

  devise :two_factor_authenticatable,
-         otp_secret_encryption_key: Rails.configuration.x.otp_secret
+         otp_secret_encryption_key: Rails.configuration.x.otp_secret,
+         otp_secret_length: 26

  devise :two_factor_backupable,
         otp_number_of_backup_codes: 10