Comments (4)
AnAnalogGuy
commented on May 30, 2024
Not much going on here...
from apache_2fa.
MFHFozzy
commented on May 30, 2024
The tokens are stored in the state dir under the 2fa directory. They only last for an hour or so i think.
After they expire, you have to re-authenticate via the google authenticator again.
Login/pass remains till the browser is shutdown. THAT is something i wish i could figure out a way to add a logout to.
from apache_2fa.
AnAnalogGuy
commented on May 30, 2024
Actually, these are two different aspects: I'm talking about actively destroying a valid token while you are talking about the configuration of the lifespawn of a token.
from apache_2fa.
AnAnalogGuy
commented on May 30, 2024
Sorry, i mis-read your comment.
Regarding the login on the browser side i guess this is nothing you can destroy from a sever side action. But you don't need to as if you distroy the security token on the server side, the second factor for the authentication is gone, so no valid authentication exists any longer.
from apache_2fa.
Related Issues (20)
- proxypass after 2fa HOT 10
- Instructions should specify pip3, perhaps
- 500 Internal Server Error - No Module Named 'onetimepass' HOT 3
- Question -Bypassing Authentication For A Given IP Range HOT 1
- Unable to Complete HOT 2
- Blank page with : Contact your administrator to obtain your 2FA secret. HOT 1
- apache_2fa generates different token than Google Authenticator HOT 2
- AH01790: user `user_test' in realm `home.me' not found: /auth/aut HOT 2
- ERR_TOO_MANY_REDIRECTS HOT 2
- Internal Server Error with LDAP HOT 8
- Secret keys HOT 2
- Use with mod_proxy?
- AuthDigest not recommended for security reasons
- Rewrite rule applies to whole site HOT 1
- You don't have permission to access /auth/auth on this server. HOT 3
- Clean_state HOT 1
- Brute Force Attack HOT 1
- Proxy instead of Directory (Question) HOT 1
- use active directory instead of htaccess HOT 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from apache_2fa.