Allow wider window for totp verification (#5811)

As server time and client time may not necessarily match
2020-02-01 21:50:15 -05:00 · 2020-02-01 21:50:15 -05:00 · 391500bdac
parent 5b63c23ae1
commit 391500bdac
1 changed files with 2 additions and 1 deletions
--- a/src/server/api/private/signin.ts
+++ b/src/server/api/private/signin.ts
@ -89,7 +89,8 @@ export default async (ctx: Koa.Context) => {
 		const verified = (speakeasy as any).totp.verify({
 			secret: profile.twoFactorSecret,
 			encoding: 'base32',
-			token: token
+			token: token,
+			window: 2
 		});

 		if (verified) {