chore(twofactor): specify key to display during decryption failures

Signed-off-by: Akhil Narang <me@akhilnarang.dev>
This commit is contained in:
Akhil Narang 2024-09-16 13:00:38 +05:30
parent c2001919a5
commit 9098538023
No known key found for this signature in database
GPG key ID: 9DCC61E211BF645F

View file

@ -133,7 +133,7 @@ def two_factor_is_enabled_for_(user):
def get_otpsecret_for_(user):
"""Set OTP Secret for user even if not set."""
if otp_secret := get_default(user + "_otpsecret"):
return decrypt(otp_secret)
return decrypt(otp_secret, key=f"{user}.otpsecret")
otp_secret = b32encode(os.urandom(10)).decode("utf-8")
set_default(user + "_otpsecret", encrypt(otp_secret))