haiwen/seahub
1
0
Fork 0
mirror of https://github.com/haiwen/seahub.git synced 2025-07-23 11:22:37 +00:00
Code Issues Releases Wiki Activity

add warning log for verify_token of totp (#5773)

Browse Source 
* add warning log for verify_token of totp

* improve log info

* improve log level
This commit is contained in:
WJH 2023-11-16 17:27:30 +08:00 committed by GitHub
parent b6014e1254
commit 160f69b83c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
seahub/two_factor/models/totp.py
View File

@ -99,17 +99,21 @@ class TOTPDevice(Device):
for offset in range(-self.tolerance, self.tolerance + 1): for offset in range(-self.tolerance, self.tolerance + 1):
totp.drift = self.drift + offset totp.drift = self.drift + offset
if (totp.t() > self.last_t) and (totp.token() == token): if token == totp.token():
self.last_t = totp.t() if self.last_t < totp.t():
if (offset != 0) and OTP_TOTP_SYNC: self.last_t = totp.t()
self.drift += offset if (offset != 0) and OTP_TOTP_SYNC:
self.save() self.drift += offset
self.save()
verified = True verified = True
break break
else:
logging.warning('Warning! Suspected token replay!')
logging.warning('user input token = %s, totp.token = %s, self.last_t = %s, totp.t = %s'
% (token, totp.token(), self.last_t, totp.t()))
else: else:
logging.info('user input invalid token = %s, totp.token = %s, self.last_t = %s, totp.t = %s' logging.info('user input invalid token = %s, totp.token = %s, self.last_t = %s, totp.t = %s'
% (token, totp.token(), totp.t(), self.last_t)) % (token, totp.token(), self.last_t, totp.t()))
verified = False verified = False
return verified return verified