TOTP: Enforce single-use of TOTP one-time passwords.#517

Merged

dd32 merged 7 commits intoWordPress:masterfrom dd32:fix/TOTP-time-validation

Feb 13, 2023

+155-14

Commits on Feb 10, 2023

TOTP: Prevent re-use of TOTP tokens, and prevent a previously-generated token being valid if a newer token is used.
dd32
committed
This needs to be floor() to ensure that the math in the loop below matches that in calc_totp().
dd32
committed
Tests: Add a test specifically covering Two_Factor_Totp::get_authcode_valid_ticktime, due to 63cdf72
dd32
committed

Commits on Feb 13, 2023