Is your enhancement related to a problem? Please describe. In some

OTP usually uses the hostname to create the value <p di

OTP with Multisite may not work about two-factor HOT 2 CLOSED

javiercasares commented on August 15, 2024

OTP with Multisite may not work

from two-factor.

Comments (2)

dd32 commented on August 15, 2024

OTP usually uses the hostname to create the value

Assuming you're referring to TOTP here, the hostname is included in the description, but is not used within the validation flow for it. The Key is per-user, but not per-hostname.

from two-factor.

kasparsd commented on August 15, 2024

It should be only FIDO U2F which locks the secret to a hostname but that is being removed soon due to #423.

The TOTP secret is stored in user meta:

two-factor/providers/class-two-factor-totp.php

Lines 431 to 433 in 88b503c

 public function set_user_totp_key( $user_id, $key ) { 

 return update_user_meta( $user_id, self::SECRET_META_KEY, $key ); 

 }

which is a global table shared across all sites on the network. I'm personally using the same TOTP key on all my sites of a multisite.

from two-factor.

Related Issues (20)

Revalidation: Prompted immediately after setting up 2FA
is_current_user_session_two_factor() returns false after changing password
Language support HOT 2
Previously created sessions continue being valid after initial 2FA activation
503 Service Unavailable after inserting 2FA - works with several tries HOT 6
Last Login HOT 2
WooCommerce Shop Manager role "Sorry, you are not allowed to do that" error when entering auth code for TOTP HOT 1
Implement Disable Provider method HOT 1
Cannot register u2f key - failed to execute 'PostMessage' on 'DOMWindow' HOT 1
incompatibility with v6.4.1 of WordPress HOT 1
wp_login hook not firing on login for users with a two-factor option enabled HOT 2
Timestamp for QR and Backup Code keygen HOT 3
Prefer "require_once" over "require" in a few spots
Plugin hangs when the security plugin option is clicked HOT 1
Limit WP.org readme.txt tags to 5 HOT 1
Use TOTP token with display HOT 1
Auto Enable 2fa when user's signup? HOT 5
Can neither use existing nor register new FIDO2 token with "FIDO U2F" → install Webauthn addon for two-factor HOT 1
Please use PHPStan HOT 4

OTP with Multisite may not work about two-factor HOT 2 CLOSED

Comments (2)

Related Issues (20)

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent

	public function set_user_totp_key( $user_id, $key ) {
	return update_user_meta( $user_id, self::SECRET_META_KEY, $key );
	}