@adminforth/two-factors-auth 1.0.33 → 1.1.1

package/.woodpecker/buildRelease.sh

@@ -0,0 +1,13 @@
+
+#!/bin/bash
+
+# write npm run output both to console and to build.log
+npm run build 2>&1 | tee build.log
+build_status=${PIPESTATUS[0]}
+
+# if exist status from the npm run build is not 0
+# then exit with the status code from the npm run build
+if [ $build_status -ne 0 ]; then
+  echo "Build failed. Exiting with status code $build_status"
+  exit $build_status
+fi

package/.woodpecker/buildSlackNotify.sh

@@ -0,0 +1,44 @@
+#!/bin/sh
+
+set -x
+
+COMMIT_SHORT_SHA=$(echo $CI_COMMIT_SHA | cut -c1-8)
+
+
+if [ "$CI_STEP_STATUS" = "success" ]; then
+  MESSAGE="Did a build without issues on \`$CI_REPO_NAME/$CI_COMMIT_BRANCH\`. Commit: _${CI_COMMIT_MESSAGE}_ (<$CI_COMMIT_URL|$COMMIT_SHORT_SHA>)"
+
+  curl  -s -X POST -H "Content-Type: application/json" -d '{
+    "username": "'"$CI_COMMIT_AUTHOR"'",
+    "icon_url": "'"$CI_COMMIT_AUTHOR_AVATAR"'",
+    "attachments": [
+      {
+          "mrkdwn_in": ["text", "pretext"],
+          "color": "#36a64f",
+          "text": "'"$MESSAGE"'"
+      }
+    ]
+  }' "$DEVELOPERS_SLACK_WEBHOOK"
+  exit 0
+fi
+export BUILD_LOG=$(cat ./build.log)
+
+BUILD_LOG=$(echo $BUILD_LOG | sed 's/"/\\"/g')
+
+MESSAGE="Broke \`$CI_REPO_NAME/$CI_COMMIT_BRANCH\` with commit _${CI_COMMIT_MESSAGE}_ (<$CI_COMMIT_URL|$COMMIT_SHORT_SHA>)"
+CODE_BLOCK="\`\`\`$BUILD_LOG\n\`\`\`"
+
+echo "Sending slack message to developers $MESSAGE"
+# Send the message
+curl -sS -X POST -H "Content-Type: application/json" -d '{
+  "username": "'"$CI_COMMIT_AUTHOR"'",
+  "icon_url": "'"$CI_COMMIT_AUTHOR_AVATAR"'",
+  "attachments": [
+    {
+        "mrkdwn_in": ["text", "pretext"],
+        "color": "#8A1C12",
+        "text": "'"$CODE_BLOCK"'",
+        "pretext": "'"$MESSAGE"'"
+    }
+  ]
+}' "$DEVELOPERS_SLACK_WEBHOOK" 2>&1

package/.woodpecker/release.yml

@@ -0,0 +1,42 @@
+clone:
+  git:
+    image: woodpeckerci/plugin-git
+    settings:
+      partial: false
+      depth: 5
+
+steps:
+  init-secrets:
+    when:
+      - event: push
+    image: infisical/cli
+    environment:
+      INFISICAL_TOKEN:
+        from_secret: VAULT_TOKEN
+    commands:
+      - infisical export --domain https://vault.devforth.io/api --format=dotenv-export --env="prod" > /woodpecker/deploy.vault.env
+    secrets:
+      - VAULT_TOKEN
+
+  release:
+    image: node:20
+    when:
+      - event: push
+    commands:
+      - apt update && apt install -y rsync
+      - export $(cat /woodpecker/deploy.vault.env | xargs)
+      - npm clean-install
+      - /bin/bash ./.woodpecker/buildRelease.sh
+      - npm audit signatures
+      - npx semantic-release
+
+  slack-on-failure:
+    when:
+      - event: push
+        status: [failure, success]
+      - event: push
+    image: curlimages/curl
+    commands:
+      - export $(cat /woodpecker/deploy.vault.env | xargs)
+      - /bin/sh ./.woodpecker/buildSlackNotify.sh
+

package/CHANGELOG.md

@@ -0,0 +1,5 @@
+
+# Changelog
+
+The complete changelog is available on the [GitHub Releases page](https://github.com/devforth/adminforth-two-factors-auth/releases).
+

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Devforth.io
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/build.log

@@ -0,0 +1,14 @@
+
+> @adminforth/two-factors-auth@1.0.33 build
+> tsc && rsync -av --exclude 'node_modules' custom dist/
+
+sending incremental file list
+custom/
+custom/TwoFactorsConfirmation.vue
+custom/TwoFactorsSetup.vue
+custom/package-lock.json
+custom/package.json
+custom/tsconfig.json
+
+sent 25,933 bytes  received 115 bytes  52,096.00 bytes/sec
+total size is 25,510  speedup is 0.98

package/custom/TwoFactorsSetup.vue

@@ -76,6 +76,8 @@ import { showErrorTost } from '@/composables/useFrontendApi';
 import { Button, LinkButton } from '@/afcl';
 import Vue2FACodeInput from '@loltech/vue3-2fa-code-input';
 import VOtpInput from "vue3-otp-input";
+import adminforth from '@/adminforth';
+
 
 const code = ref(null);
 const handleOnComplete = (value) => {
@@ -122,7 +124,7 @@ function parseJwt(token) {
 
 function onCopyClick(){
   navigator.clipboard.writeText(totp.value.newSecret);
-  window.adminforth.alert({message: 'Copied to clipboard', variant: 'success'})
+  adminforth.alert({message: 'Copied to clipboard', variant: 'success'})
 }
 
 onMounted(async () => {

package/custom/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "baseUrl": ".", // This should point to your project root
+    "paths": {
+      "@/*": [
+        // "node_modules/adminforth/dist/spa/src/*"
+        "../../../spa/src/*"
+      ],
+      "*": [
+        // "node_modules/adminforth/dist/spa/node_modules/*"
+        "../../../spa/node_modules/*"
+      ],
+      "@@/*": [
+        // "node_modules/adminforth/dist/spa/src/*"
+        "."
+      ]
+    }
+  }
+}

package/dist/custom/TwoFactorsSetup.vue

@@ -76,6 +76,8 @@ import { showErrorTost } from '@/composables/useFrontendApi';
 import { Button, LinkButton } from '@/afcl';
 import Vue2FACodeInput from '@loltech/vue3-2fa-code-input';
 import VOtpInput from "vue3-otp-input";
+import adminforth from '@/adminforth';
+
 
 const code = ref(null);
 const handleOnComplete = (value) => {
@@ -122,7 +124,7 @@ function parseJwt(token) {
 
 function onCopyClick(){
   navigator.clipboard.writeText(totp.value.newSecret);
-  window.adminforth.alert({message: 'Copied to clipboard', variant: 'success'})
+  adminforth.alert({message: 'Copied to clipboard', variant: 'success'})
 }
 
 onMounted(async () => {

package/dist/custom/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "baseUrl": ".", // This should point to your project root
+    "paths": {
+      "@/*": [
+        // "node_modules/adminforth/dist/spa/src/*"
+        "../../../spa/src/*"
+      ],
+      "*": [
+        // "node_modules/adminforth/dist/spa/node_modules/*"
+        "../../../spa/node_modules/*"
+      ],
+      "@@/*": [
+        // "node_modules/adminforth/dist/spa/src/*"
+        "."
+      ]
+    }
+  }
+}

package/dist/index.js

@@ -39,6 +39,10 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
         if (typeof this.options.twoFaSecretFieldName !== 'string') {
             throw new Error('twoFaSecretFieldName must be a string');
         }
+        if (this.options.timeStepWindow === undefined
+            || typeof this.options.timeStepWindow !== 'number'
+            || this.options.timeStepWindow < 0)
+            this.options.timeStepWindow = 1;
         this.authResource = resourceConfig;
         if (!this.authResource.columns.some((col) => col.name === this.options.twoFaSecretFieldName)) {
             throw new Error(`Column ${this.options.twoFaSecretFieldName} not found in ${this.authResource.label}`);
@@ -47,6 +51,7 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
             const secret = adminUser.dbUser[this.options.twoFaSecretFieldName];
             const userName = adminUser.dbUser[adminforth.config.auth.usernameField];
             const brandName = adminforth.config.customization.brandName;
+            const brandNameSlug = adminforth.config.customization.brandNameSlug;
             const authResource = adminforth.config.resources.find((res) => res.resourceId === adminforth.config.auth.usersResourceId);
             const authPk = authResource.columns.find((col) => col.primaryKey).name;
             const userPk = adminUser.dbUser[authPk];
@@ -62,7 +67,7 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
             }
             else {
                 const value = this.adminforth.auth.issueJWT({ userName, issuer: brandName, pk: userPk, userCanSkipSetup }, 'tempTotp', '2h');
-                response.setHeader('Set-Cookie', `adminforth_totpTemporaryJWT=${value}; Path=${this.adminforth.config.baseUrl || '/'}; HttpOnly; SameSite=Strict; max-age=3600; `);
+                response.setHeader('Set-Cookie', `adminforth_${brandNameSlug}_totpTemporaryJWT=${value}; Path=${this.adminforth.config.baseUrl || '/'}; HttpOnly; SameSite=Strict; max-age=3600; `);
                 return {
                     body: {
                         loginAllowed: false,
@@ -72,7 +77,7 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
                 };
             }
             const totpTemporaryJWT = this.adminforth.auth.issueJWT({ userName, newSecret, issuer: brandName, pk: userPk, userCanSkipSetup }, 'tempTotp', '2h');
-            response.setHeader('Set-Cookie', `adminforth_totpTemporaryJWT=${totpTemporaryJWT}; Path=${this.adminforth.config.baseUrl || '/'}; HttpOnly; SameSite=Strict; Expires=${new Date(Date.now() + '1h').toUTCString()} `);
+            response.setHeader('Set-Cookie', `adminforth_${brandNameSlug}_totpTemporaryJWT=${totpTemporaryJWT}; Path=${this.adminforth.config.baseUrl || '/'}; HttpOnly; SameSite=Strict; Expires=${new Date(Date.now() + '1h').toUTCString()} `);
             return {
                 body: {
                     loginAllowed: false,
@@ -90,7 +95,8 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
             handler: (server) => __awaiter(this, void 0, void 0, function* () {
                 var _a;
                 const toReturn = { totpJWT: null, status: 'ok', };
-                const totpTemporaryJWT = (_a = server.cookies.find((cookie) => cookie.key === 'adminforth_totpTemporaryJWT')) === null || _a === void 0 ? void 0 : _a.value;
+                const brandNameSlug = this.adminforth.config.customization.brandNameSlug;
+                const totpTemporaryJWT = (_a = server.cookies.find((cookie) => cookie.key === `adminforth_${brandNameSlug}_totpTemporaryJWT`)) === null || _a === void 0 ? void 0 : _a.value;
                 if (totpTemporaryJWT) {
                     toReturn.totpJWT = totpTemporaryJWT;
                 }
@@ -101,15 +107,15 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
             method: 'POST',
             path: `/plugin/twofa/confirmSetup`,
             noAuth: true,
-            handler: (_b) => __awaiter(this, [_b], void 0, function* ({ body, adminUser, response, cookies }) {
-                var _c;
-                const totpTemporaryJWT = (_c = cookies.find((cookie) => cookie.key === 'adminforth_totpTemporaryJWT')) === null || _c === void 0 ? void 0 : _c.value;
+            handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser, response, cookies }) {
+                var _b;
+                const brandNameSlug = this.adminforth.config.customization.brandNameSlug;
+                const totpTemporaryJWT = (_b = cookies.find((cookie) => cookie.key === `adminforth_${brandNameSlug}_totpTemporaryJWT`)) === null || _b === void 0 ? void 0 : _b.value;
                 const decoded = yield this.adminforth.auth.verify(totpTemporaryJWT, 'tempTotp');
-                if (!decoded) {
+                if (!decoded)
                     return { status: 'error', message: 'Invalid token' };
-                }
                 if (decoded.newSecret) {
-                    const verified = body.skip && decoded.userCanSkipSetup ? true : twofactor.verifyToken(decoded.newSecret, body.code);
+                    const verified = body.skip && decoded.userCanSkipSetup ? true : twofactor.verifyToken(decoded.newSecret, body.code, this.options.timeStepWindow);
                     if (verified) {
                         this.connectors = this.adminforth.connectors;
                         if (!body.skip) {
@@ -129,7 +135,7 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
                     this.connectors = this.adminforth.connectors;
                     const connector = this.connectors[this.authResource.dataSource];
                     const user = yield connector.getRecordByPrimaryKey(this.authResource, decoded.pk);
-                    const verified = twofactor.verifyToken(user[this.options.twoFaSecretFieldName], body.code);
+                    const verified = twofactor.verifyToken(user[this.options.twoFaSecretFieldName], body.code, this.options.timeStepWindow);
                     if (verified) {
                         this.adminforth.auth.removeCustomCookie({ response, name: 'totpTemporaryJWT' });
                         this.adminforth.auth.setAuthCookie({ response, username: decoded.userName, pk: decoded.pk });
@@ -145,9 +151,10 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
             method: "GET",
             path: "/plugin/twofa/skip-allow",
             noAuth: true,
-            handler: (_d) => __awaiter(this, [_d], void 0, function* ({ cookies }) {
-                var _e;
-                const totpTemporaryJWT = (_e = cookies.find((cookie) => cookie.key === "adminforth_totpTemporaryJWT")) === null || _e === void 0 ? void 0 : _e.value;
+            handler: (_a) => __awaiter(this, [_a], void 0, function* ({ cookies }) {
+                var _b;
+                const brandNameSlug = this.adminforth.config.customization.brandNameSlug;
+                const totpTemporaryJWT = (_b = cookies.find((cookie) => cookie.key === `adminforth_${brandNameSlug}_totpTemporaryJWT`)) === null || _b === void 0 ? void 0 : _b.value;
                 const decoded = yield this.adminforth.auth.verify(totpTemporaryJWT, "tempTotp");
                 if (!decoded) {
                     return { status: "error", message: "Invalid token" };

package/index.ts

@@ -23,6 +23,7 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
     super.modifyResourceConfig(adminforth, resourceConfig);
     this.adminforth = adminforth;
     this.adminForthAuth = adminforth.auth;
+
     const customPages = this.adminforth.config.customization.customPages
     customPages.push({
       path:'/confirm2fa',
@@ -42,6 +43,13 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
     if (typeof this.options.twoFaSecretFieldName !=='string'){
       throw new Error('twoFaSecretFieldName must be a string')
     }
+    if (
+      this.options.timeStepWindow === undefined
+      || typeof this.options.timeStepWindow !== 'number'
+      || this.options.timeStepWindow < 0
+    )
+      this.options.timeStepWindow = 1;
+
     this.authResource = resourceConfig
     if(!this.authResource.columns.some((col)=>col.name === this.options.twoFaSecretFieldName)){
       throw new Error(`Column ${this.options.twoFaSecretFieldName} not found in ${this.authResource.label}`)
@@ -50,7 +58,8 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
       async({ adminUser, response }: { adminUser: AdminUser, response: IAdminForthHttpResponse} )=> {
         const secret = adminUser.dbUser[this.options.twoFaSecretFieldName]
         const userName = adminUser.dbUser[adminforth.config.auth.usernameField]
-        const brandName = adminforth.config.customization.brandName
+        const brandName = adminforth.config.customization.brandName;
+        const brandNameSlug = adminforth.config.customization.brandNameSlug;
         const authResource = adminforth.config.resources.find((res)=>res.resourceId === adminforth.config.auth.usersResourceId )
         const authPk = authResource.columns.find((col)=>col.primaryKey).name
         const userPk = adminUser.dbUser[authPk]
@@ -68,7 +77,7 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
           newSecret = tempSecret.secret
         } else {
           const value = this.adminforth.auth.issueJWT({userName,  issuer:brandName, pk:userPk, userCanSkipSetup }, 'tempTotp', '2h');
-          response.setHeader('Set-Cookie', `adminforth_totpTemporaryJWT=${value}; Path=${this.adminforth.config.baseUrl || '/'}; HttpOnly; SameSite=Strict; max-age=3600; `);
+          response.setHeader('Set-Cookie', `adminforth_${brandNameSlug}_totpTemporaryJWT=${value}; Path=${this.adminforth.config.baseUrl || '/'}; HttpOnly; SameSite=Strict; max-age=3600; `);
 
           return {
             body:{
@@ -78,13 +87,13 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
             ok: true
           }
         }
-        const totpTemporaryJWT = this.adminforth.auth.issueJWT({userName, newSecret, issuer:brandName, pk:userPk, userCanSkipSetup },'tempTotp', '2h'); 
-        response.setHeader('Set-Cookie', `adminforth_totpTemporaryJWT=${totpTemporaryJWT}; Path=${this.adminforth.config.baseUrl || '/'}; HttpOnly; SameSite=Strict; Expires=${new Date(Date.now() + '1h').toUTCString() } `);
-        
-        return { 
+        const totpTemporaryJWT = this.adminforth.auth.issueJWT({userName, newSecret, issuer:brandName, pk:userPk, userCanSkipSetup }, 'tempTotp', '2h');
+        response.setHeader('Set-Cookie', `adminforth_${brandNameSlug}_totpTemporaryJWT=${totpTemporaryJWT}; Path=${this.adminforth.config.baseUrl || '/'}; HttpOnly; SameSite=Strict; Expires=${new Date(Date.now() + '1h').toUTCString() } `);
+
+        return {
           body:{
             loginAllowed: false,
-            redirectTo: secret ? '/confirm2fa' : '/setup2fa', 
+            redirectTo: secret ? '/confirm2fa' : '/setup2fa',
           },
           ok: true
         }
@@ -98,8 +107,9 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
       noAuth: true,
       handler: async (server) => {
         const toReturn = {totpJWT:null,status:'ok',}
+        const brandNameSlug = this.adminforth.config.customization.brandNameSlug;
 
-        const totpTemporaryJWT = server.cookies.find((cookie)=>cookie.key === 'adminforth_totpTemporaryJWT')?.value;
+        const totpTemporaryJWT = server.cookies.find((cookie)=>cookie.key === `adminforth_${brandNameSlug}_totpTemporaryJWT`)?.value;
         if (totpTemporaryJWT){
           toReturn.totpJWT = totpTemporaryJWT
         }
@@ -111,13 +121,15 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
       path: `/plugin/twofa/confirmSetup`,
       noAuth: true,
       handler: async ({ body, adminUser, response, cookies  }) => {
-        const totpTemporaryJWT = cookies.find((cookie)=>cookie.key === 'adminforth_totpTemporaryJWT')?.value;
+        const brandNameSlug = this.adminforth.config.customization.brandNameSlug;
+        const totpTemporaryJWT = cookies.find((cookie)=>cookie.key === `adminforth_${brandNameSlug}_totpTemporaryJWT`)?.value;
         const decoded = await this.adminforth.auth.verify(totpTemporaryJWT, 'tempTotp');
-        if ( !decoded ) {
+
+        if (!decoded)
           return {status:'error',message:'Invalid token'}
-        }
+
         if (decoded.newSecret) {
-          const verified = body.skip && decoded.userCanSkipSetup ? true : twofactor.verifyToken(decoded.newSecret, body.code);
+          const verified = body.skip && decoded.userCanSkipSetup ? true : twofactor.verifyToken(decoded.newSecret, body.code, this.options.timeStepWindow);
           if (verified) {
             this.connectors = this.adminforth.connectors
             if (!body.skip) {
@@ -135,8 +147,8 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
           this.connectors = this.adminforth.connectors
           const connector = this.connectors[this.authResource.dataSource];
           const user = await connector.getRecordByPrimaryKey(this.authResource, decoded.pk)
-          const verified = twofactor.verifyToken(user[this.options.twoFaSecretFieldName], body.code);
-          if (verified) { 
+          const verified = twofactor.verifyToken(user[this.options.twoFaSecretFieldName], body.code, this.options.timeStepWindow);
+          if (verified) {
             this.adminforth.auth.removeCustomCookie({response, name:'totpTemporaryJWT'})
             this.adminforth.auth.setAuthCookie({response, username:decoded.userName, pk:decoded.pk})
             return { status: 'ok', allowedLogin: true }
@@ -151,12 +163,13 @@ export default class TwoFactorsAuthPlugin extends AdminForthPlugin {
       path: "/plugin/twofa/skip-allow",
       noAuth: true,
       handler: async ({ cookies }) => {
+        const brandNameSlug = this.adminforth.config.customization.brandNameSlug;
         const totpTemporaryJWT = cookies.find(
-          (cookie) => cookie.key === "adminforth_totpTemporaryJWT"
+          (cookie) => cookie.key === `adminforth_${brandNameSlug}_totpTemporaryJWT`
         )?.value;
         const decoded = await this.adminforth.auth.verify(
           totpTemporaryJWT,
-          "tempTotp"
+          "tempTotp",
         );
         if (!decoded) {
           return { status: "error", message: "Invalid token" };

package/package.json

@@ -1,17 +1,56 @@
 {
   "name": "@adminforth/two-factors-auth",
-  "version": "1.0.33",
+  "version": "1.1.1",
   "description": "AdminForth plugin for two factors authentication",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/devforth/adminforth-two-factors-auth.git"
+  },
   "type": "module",
   "scripts": {
-    "rollout": "tsc && rsync -av --exclude 'node_modules' custom dist/ && npm version patch && npm publish --access public",
-    "prepare": "npm link adminforth"
+    "prepare": "npm link adminforth",
+    "build": "tsc && rsync -av --exclude 'node_modules' custom dist/"
   },
+  "keywords": [
+    "adminforth",
+    "two-factors-auth",
+    "2fa"
+  ],
   "author": "devforth",
   "license": "ISC",
   "dependencies": {
     "node-2fa": "^2.0.3"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.7",
+    "semantic-release": "^24.2.1",
+    "semantic-release-slack-bot": "^4.0.2",
+    "typescript": "^5.7.3"
+  },
+  "release": {
+    "plugins": [
+      "@semantic-release/commit-analyzer",
+      "@semantic-release/release-notes-generator",
+      "@semantic-release/npm",
+      "@semantic-release/github",
+      [
+        "semantic-release-slack-bot",
+        {
+          "notifyOnSuccess": true,
+          "notifyOnFail": true,
+          "slackIcon": ":package:",
+          "markdownReleaseNotes": true
+        }
+      ]
+    ],
+    "branches": [
+      "main",
+      {
+        "name": "next",
+        "prerelease": true
+      }
+    ]
   }
 }

package/types.ts

@@ -3,13 +3,19 @@ import { AdminUser } from "adminforth";
 export type PluginOptions = {
 
     /**
-     * Name of the field in the auth resource which will store 2FA secret. 
+     * Name of the field in the auth resource which will store 2FA secret.
      *
      * Resource mandatory should have one columns which defined {@link AdminForthResourceColumn} which
      * name should be equal to the value .
      */
     twoFaSecretFieldName: string;
 
+    /**
+     * Not-negative optional time step window for 2FA. This value means that the user will be able to enter the old code
+     * for the next 30 seconds after the new code was generated.
+     */
+    timeStepWindow?: number;
+
     /**
      * Optional function to filter users to apply 2FA.
      * Should return true if 2FA should be applied to the user and false if AdminForth should not challenge the user with 2FA.

package/Changelog.md

@@ -1,23 +0,0 @@
-## [1.0.30] - 2024-12-13
-
-### Fixed
-
-- Fixed skip 2fa
-
-## [1.0.20] - 2024-12-05
-
-### Added
-
-- Added usersFilterToAllowSkipSetup to TwoFactorsAuthPlugin to allow skip 2FA setup for specific users
-
-## [1.0.19] - 2024-12-02
-
-### Fixed
-
-- Fixed copy hash for 2fa
-
-## [1.0.18] - 2024-09-13
-
-### Added
-
-- add usersFilterToApply to TwoFactorsAuthPlugin to disable 2FA for specific users