@adminforth/two-factors-auth 4.3.4 → 4.4.0

package/dist/services/cookieService.js

@@ -7,6 +7,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
+import { convertPeriodToSeconds } from "adminforth";
 import crypto from 'crypto';
 const TOTP_TEMP_COOKIE = "2FaTemporaryJWT";
 const PASSKEY_LOGIN_TEMP_COOKIE = "passkeyLoginTemporaryJWT";
@@ -36,11 +37,11 @@ export class CookieService {
         });
     }
     setTotpTemporary(response, payload) {
-        var _a;
-        const value = this.adminforth.auth.issueJWT(payload, 'temp2FA', ((_a = this.options.passkeys) === null || _a === void 0 ? void 0 : _a.challengeValidityPeriod) || '1m');
+        const period = this.options.totpSetupValidityPeriod || '1m';
+        const value = this.adminforth.auth.issueJWT(payload, 'temp2FA', period);
         this.adminforth.auth.setCustomCookie({
             response,
-            payload: { name: TOTP_TEMP_COOKIE, value, expiry: undefined, expirySeconds: 10 * 60, httpOnly: true },
+            payload: { name: TOTP_TEMP_COOKIE, value, expiry: undefined, expirySeconds: convertPeriodToSeconds(period), httpOnly: true },
         });
     }
     removeTotpTemporary(response) {

package/dist/types.d.ts

@@ -18,6 +18,12 @@ export interface PluginOptions extends PluginsCommonOptions {
      * During this period, user will not be challenged with 2FA on sensitive actions.
      */
     stepUpMfaGracePeriodSeconds?: number;
+    /**
+     * Time the user has to complete 2FA setup / enter the OTP code before the temporary
+     * login session expires. Increase it if users don't have enough time to scan the QR
+     * code and enter the code. Default is '5m'.
+     */
+    totpSetupValidityPeriod?: PeriodString;
     customBrandPrefix?: string;
     /**
      * Passkeys (WebAuthn) configuration.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/two-factors-auth",
-  "version": "4.3.4",
+  "version": "4.4.0",
   "description": "AdminForth plugin for two factors authentication",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/services/cookieService.ts

@@ -1,4 +1,5 @@
 import type { IAdminForth, IAdminForthHttpResponse } from "adminforth";
+import { convertPeriodToSeconds } from "adminforth";
 import type { PluginOptions } from "../types.js";
 import type { CookieList, HttpHeaders } from "../utils/types.js";
 import crypto from 'crypto';
@@ -57,10 +58,11 @@ export class CookieService {
   }
 
   public setTotpTemporary(response: IAdminForthHttpResponse, payload: TotpTemporaryPayload): void {
-    const value = this.adminforth.auth.issueJWT(payload, 'temp2FA', this.options.passkeys?.challengeValidityPeriod || '1m');
+    const period = this.options.totpSetupValidityPeriod || '1m';
+    const value = this.adminforth.auth.issueJWT(payload, 'temp2FA', period);
     this.adminforth.auth.setCustomCookie({
       response,
-      payload: { name: TOTP_TEMP_COOKIE, value, expiry: undefined, expirySeconds: 10 * 60, httpOnly: true },
+      payload: { name: TOTP_TEMP_COOKIE, value, expiry: undefined, expirySeconds: convertPeriodToSeconds(period), httpOnly: true },
     });
   }
 

package/types.ts

@@ -23,6 +23,13 @@ export interface PluginOptions extends PluginsCommonOptions {
      */
     stepUpMfaGracePeriodSeconds?: number;
 
+    /**
+     * Time the user has to complete 2FA setup / enter the OTP code before the temporary
+     * login session expires. Increase it if users don't have enough time to scan the QR
+     * code and enter the code. Default is '5m'.
+     */
+    totpSetupValidityPeriod?: PeriodString; // e.g. '5m', '10m', '15m'. Default is '1m'
+
     customBrandPrefix?: string;
 
     /**