202
97%

Ran 04 Jun 2019 01:01AM UTC

Jobs 10

Files 22

Run time 8min

Badge

Embed ▾

pending completion

Build # 202

Build Type

push

travis-ci

Committed by

web-flow

Commit Message

fix: Use passlib for totp_secret (#94)

onetimepass seems to be unmaintained - and more importantly totp_secret was being
stored in the DB in the clear as well as in the session cookie in the clear.
That is a big security hole.
passlib has an easy way to encrypt these.

Also:
- updated docs
- make sure that on logout, all two factor session elements are cleared out
- Using two-factor now requires a TWO_FACTOR_SECRET as defined by passlib

This change requires the setting of TWO_FACTOR_SECRET, and installing the cryptography
package.

closes: #89

Run Details

1784 of 1917 relevant lines covered (93.06%)

9.31 hits per line

Jobs

ID	Job ID	Ran	Coverage
1	202.1 (REQUIREMENTS=lowest)	04 Jun 2019 01:01AM UTC	93.06	Travis Job 202.1
2	202.2 (REQUIREMENTS=lowest)	04 Jun 2019 01:01AM UTC	93.06	Travis Job 202.2
3	202.3 (REQUIREMENTS=lowest)	04 Jun 2019 01:01AM UTC	93.06	Travis Job 202.3
4	202.4 (REQUIREMENTS=lowest)	04 Jun 2019 01:01AM UTC	93.06	Travis Job 202.4
5	202.5 (REQUIREMENTS=release)	04 Jun 2019 01:01AM UTC	93.06	Travis Job 202.5
6	202.6 (REQUIREMENTS=release)	04 Jun 2019 01:04AM UTC	93.06	Travis Job 202.6
7	202.7 (REQUIREMENTS=release)	04 Jun 2019 01:04AM UTC	93.06	Travis Job 202.7
8	202.8 (REQUIREMENTS=release)	04 Jun 2019 01:06AM UTC	93.06	Travis Job 202.8
9	202.9 (REQUIREMENTS=lowest)	04 Jun 2019 01:08AM UTC	93.06	Travis Job 202.9
10	202.10 (REQUIREMENTS=release)	04 Jun 2019 01:09AM UTC	93.06	Travis Job 202.10

Source Files on build 202

Detailed source file information is not available for this build.

jwag956 / flask-security / 202
97%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 202

jwag956 / flask-security / 202 97%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 202

jwag956 / flask-security / 202
97%

README BADGES
x