Hey, noticed that the one-time "backup" codes for Google Authenticator do 
not work on our 5.1.5 install. They are called "scratchcodes" in the 
database. Looks like the cas-server-support-gauth-core passes the token 
verification to the com.warrenstrange.auth package which when I checked the 
code for, didn't seem to take into account those scratch codes. Perhaps I'm 
missing something but it's strange that the regular timed codes work but 
the scratch codes don't in our installation.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/68911d68-2458-44be-9707-202e8e40ac3d%40apereo.org.

Reply via email to