{"action":"created","issue":{"url":"https://api.github.com/repos/skavanagh/KeyBox/issues/102","labels_url":"https://api.github.com/repos/skavanagh/KeyBox/issues/102/labels{/name}","comments_url":"https://api.github.com/repos/skavanagh/KeyBox/issues/102/comments","events_url":"https://api.github.com/repos/skavanagh/KeyBox/issues/102/events","html_url":"https://github.com/skavanagh/KeyBox/issues/102","id":101796576,"number":102,"title":"Suggestion: Mandatory OTP","user":{"login":"garywiz","id":822470,"avatar_url":"https://avatars.githubusercontent.com/u/822470?v=3","gravatar_id":"","url":"https://api.github.com/users/garywiz","html_url":"https://github.com/garywiz","followers_url":"https://api.github.com/users/garywiz/followers","following_url":"https://api.github.com/users/garywiz/following{/other_user}","gists_url":"https://api.github.com/users/garywiz/gists{/gist_id}","starred_url":"https://api.github.com/users/garywiz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/garywiz/subscriptions","organizations_url":"https://api.github.com/users/garywiz/orgs","repos_url":"https://api.github.com/users/garywiz/repos","events_url":"https://api.github.com/users/garywiz/events{/privacy}","received_events_url":"https://api.github.com/users/garywiz/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-08-19T03:03:53Z","updated_at":"2015-12-09T13:31:34Z","closed_at":"2015-11-26T11:32:50Z","body":"We have an environment where we want to guarantee higher security, and would like to see a feature where OTP entry is mandatory.\r\n\r\nI couldn't find a way to do this, and I'll fork sometime and add it myself, but it would be a nice configuration option.\r\n\r\n+1 for Mandatory OTP."},"comment":{"url":"https://api.github.com/repos/skavanagh/KeyBox/issues/comments/163232977","html_url":"https://github.com/skavanagh/KeyBox/issues/102#issuecomment-163232977","issue_url":"https://api.github.com/repos/skavanagh/KeyBox/issues/102","id":163232977,"user":{"login":"skavanagh","id":3192731,"avatar_url":"https://avatars.githubusercontent.com/u/3192731?v=3","gravatar_id":"","url":"https://api.github.com/users/skavanagh","html_url":"https://github.com/skavanagh","followers_url":"https://api.github.com/users/skavanagh/followers","following_url":"https://api.github.com/users/skavanagh/following{/other_user}","gists_url":"https://api.github.com/users/skavanagh/gists{/gist_id}","starred_url":"https://api.github.com/users/skavanagh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/skavanagh/subscriptions","organizations_url":"https://api.github.com/users/skavanagh/orgs","repos_url":"https://api.github.com/users/skavanagh/repos","events_url":"https://api.github.com/users/skavanagh/events{/privacy}","received_events_url":"https://api.github.com/users/skavanagh/received_events","type":"User","site_admin":false},"created_at":"2015-12-09T13:31:34Z","updated_at":"2015-12-09T13:31:34Z","body":"Sounds like it's invaliding the session before registering the OTP shared\nsecret. I'll take a look tonight.\n\nOn Wed, Dec 9, 2015 at 7:12 AM, Andrea Colapinto <notifications@github.com>\nwrote:\n\n> Hello @skavanagh <https://github.com/skavanagh>,\n>\n> I have tried the mandatory OTP with oneTimePassword=required parameter in\n> KeyBoxConfig.properties file, but I have an issue:\n>\n> When the user tries to login the first time, the QR Code is displayed\n> correctly and on the right there is only the button \"Got it\".\n> After that, the user is redirected to the login page, he/she enter\n> username, password and the OTP, but the QR code and \"Got it\" button jump\n> out again.\n> In this way the user is not able to log in.\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/skavanagh/KeyBox/issues/102#issuecomment-163206225>.\n>\n"}}