Code

Encrypt TOTP keys#103

Code

Merged

dd32 merged 13 commits intotrunkWordPress/wporg-two-factor:trunkfrom add/encrypted-totpWordPress/wporg-two-factor:add/encrypted-totpCopy head branch name to clipboardApr 20, 2023

+121-8

Commits

Commits on Apr 12, 2023

• Add a Two_Factor_TOTP class variant that uses encryption.

  dd32

  committed
  b805cec

  Copy full SHA for b805cec

• Upgrade unencrypted keys to encrypted upon retrieval.

  dd32

  committed
  b303296

  Copy full SHA for b303296

• Update test to reflect new provider

  pkevan

  authored
  1050c61

  Copy full SHA for 1050c61

Commits on Apr 13, 2023

• Switch to using authenticated encryption. The encrypted keys are only valid per user ID.

  dd32

  committed
  d1b3a47

  Copy full SHA for d1b3a47

• Merge branch 'add/encrypted-totp' of github.com:WordPress/wporg-two-factor into add/encrypted-totp

  dd32

  committed
  92f316d

  Copy full SHA for 92f316d

• Tests: Test that the class is expected, but also that it returns the expected key.

  dd32

  authored
  390537c

  Copy full SHA for 390537c

• Tests: Validate that the TOTP key is stored in an encrypted format in the user_meta.

  dd32

  committed
  852d818

  Copy full SHA for 852d818

• Tests: Only validate that it's encrypted if the encryption methods are available.

  dd32

  committed
  3d89b20

  Copy full SHA for 3d89b20

Commits on Apr 18, 2023

• Update function names per WordPress/wporg-mu-plugins#390

  dd32

  authored
  96cab4d

  Copy full SHA for 96cab4d

Commits on Apr 20, 2023

• Revert "Tests: Only validate that it's encrypted if the encryption methods are available."

  Show description for 50884d9
  dd32

  committed
  50884d9

  Copy full SHA for 50884d9

• Tests: Define an encryption key for Two-factor.

  dd32

  committed
  9d72289

  Copy full SHA for 9d72289

• Set the users TOTP key via the provider, to allow it to be encrypted.

  dd32

  committed
  bc8f9b4

  Copy full SHA for bc8f9b4

• Tests: Add a test that verifies that Secret keys are upgraded from stored non-encrypted to encrypted.

  dd32

  committed
  8857659

  Copy full SHA for 8857659