TOTP broken

[franco]

Because you changed the setting and didn't tell us? ¯\_(ツ)_/¯


Cheers,
Franco

[yohighnest]

the problem was that in the rfc states a time window of 30sec, if you set another time window you cannot use authenticator apps like the google authenticator because there 30sec is fixed. If you use FreeOTP you can change the time window to another value. For me FreeTOP is not working with the QR Code from Opnsense, but adding the code manually with another time window should work. since this setting is causing problems, i would suggest to a bigger hint, which gives attention to the fact that other values than 30 are not RFC conform and not working with the most authenticator apps.

[yohighnest]

Because you changed the setting and didn't tell us? ¯\_(ツ)_/¯


Cheers,
Franco

haha true, i didnt know RFC 6238 in detail a this time, but stating 3 times the same wasnt really helpfull.