10
97%
master: 97%

Ran 04 Jun 2019 01:09AM UTC

Files 22

Run time 1s

Badge

Embed ▾

Committed 04 Jun 2019 12:57AM UTC coverage: 93.062% (+0.1%) from 92.947%

Job # REQUIREMENTS=release

Build Type

push

travis-ci

Committed by

web-flow

Commit Message

fix: Use passlib for totp_secret (#94)

onetimepass seems to be unmaintained - and more importantly totp_secret was being
stored in the DB in the clear as well as in the session cookie in the clear.
That is a big security hole.
passlib has an easy way to encrypt these.

Also:
- updated docs
- make sure that on logout, all two factor session elements are cleared out
- Using two-factor now requires a TWO_FACTOR_SECRET as defined by passlib

This change requires the setting of TWO_FACTOR_SECRET, and installing the cryptography
package.

closes: #89

Run Details

1784 of 1917 relevant lines covered (93.06%)

0.93 hits per line

jwag956 / flask-security / 202 / 10
97%
master: 97%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 202.10 (REQUIREMENTS=release)

jwag956 / flask-security / 202 / 10 97% master: 97%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 202.10 (REQUIREMENTS=release)

jwag956 / flask-security / 202 / 10
97%
master: 97%

README BADGES
x