Include that 30 second limit on other 2FA checks

This commit is contained in:
Dane Everitt 2017-02-01 23:05:19 -05:00
parent a93adce303
commit 4be9e30eee
No known key found for this signature in database
GPG key ID: EEA66103B3D71F53

View file

@ -105,7 +105,7 @@ class User extends Model implements AuthenticatableContract, AuthorizableContrac
*/
public function toggleTotp($token)
{
if (! Google2FA::verifyKey($this->totp_secret, $token)) {
if (! Google2FA::verifyKey($this->totp_secret, $token, 1)) {
return false;
}