Skip to content

Change 2FA to verify password hash instead of timestamp

Gosia Ksionek requested to merge 244638-change-time-to-salt into master

What does this MR do?

In !41327 (merged), we fixed a problem that prevented LDAP users from logging in due to an issue with timestamp precision. To avoid pitfalls with time comparisons, compare a hash of the encrypted password instead of the last updated timestamps.

Relates to #244638 (closed).

This solution was proposed by @manojmj 👏

Related to #244638 (closed).

Edited by Stan Hu

Merge request reports