Configurable HOTP event window

[sj]

Hi,

It's not quite clear what the plugin's HOTP event window is. It's probably dictated by multiotp? I'd like to be able to configure that in the administrator interface.

Thanks!

Bas

[loki36]

Hi,
I'm not sure to understand the question can you send a screenshot

[sj]

I've explained it in the last few sentences (section titled "Explanation of HOTP Authentication events and the event window") on http://www.sj-vs.net/two-factor-authentication-for-owncloud-using-one-time-passwords-otp-from-yubikey/ - you can have a look if you like?

I think multiotp uses the _config_data['max_event_window'] variable to set it, with a default of 100.

[loki36]

so,
you want have for HOTP, two config,
the last event window
and
the event window range
??
if yes i will create a new issue, but i don't know for what milestone

[sj]

Indeed: the 'last event' will indicate where the window starts, the 'window size' (or 'window range') will determine how many 'future' HOTP values will be checked. Currently, the 'last event' is also used for the TOTP time window size (defaults to 30 for Google Authenticator), which is slightly confusing since these are very different things. Thanks!