constantoine/totp-rs

Can't use colon in site name

Closed this issue · 2 comments

Original bug report on LemmyNet: LemmyNet/lemmy#4518

Our Lemmy instance site name uses a colon, which apparently prevents 2FA from being enabled:

CouldntGenerateTotp: Issuer can't contain a colon. "Star Trek: Website" contains a colon

They told me it was really an issue with totp-rs, so I am letting you know!

Hi! Because of the way the de-facto standard works, the issuer parameter can't contain nor a : nor its url-encoded %3A form.

Right now, you might want to consider omitting the colon entitely. I feel like silently accepting invalid user input is probably not a great solution

Thanks for the reply, that's sad to hear it can't be fixed. You see, in Star Trek culture a missing colon in a name is a sign of poor quality!