Harden PragmaRX secret to 32 bytes (#2859)

This is needed at all but that extra security is always good.
2016-10-31 18:20:31 +00:00
parent 140bac2b53
commit 10ea5daabd
1 changed files with 1 additions and 1 deletions
@@ -176,7 +176,7 @@ class AuthController extends Controller
        $google2fa = app()->make('PragmaRX\Google2FA\Contracts\Google2FA');

        if ($user->two_factor_secret=='') {
-            $user->two_factor_secret = $google2fa->generateSecretKey();
+            $user->two_factor_secret = $google2fa->generateSecretKey(32);
            $user->save();
        }