Harden PragmaRX secret to 32 bytes (snipe#2859)

This is needed at all but that extra security is always good.
dmeltzer · Nov 6, 2016 · c63cab9 · c63cab9
1 parent 57d0ac0
commit c63cab9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Http/Controllers/Auth/AuthController.php b/app/Http/Controllers/Auth/AuthController.php
@@ -176,7 +176,7 @@ public function getTwoFactorEnroll()
         $google2fa = app()->make('PragmaRX\Google2FA\Contracts\Google2FA');
 
         if ($user->two_factor_secret=='') {
-            $user->two_factor_secret = $google2fa->generateSecretKey();
+            $user->two_factor_secret = $google2fa->generateSecretKey(32);
             $user->save();
         }