From 6248e5179734535eac40e19cd0c506c8ac7592c8 Mon Sep 17 00:00:00 2001
From: Wolfgang Bumiller <w.bumiller@proxmox.com>
Date: Mon, 1 Feb 2021 15:13:01 +0100
Subject: [PATCH] change half-ticket time range from -120..240 to  -60..600

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
---
 src/api2/access.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/api2/access.rs b/src/api2/access.rs
index c310870e..46725c97 100644
--- a/src/api2/access.rs
+++ b/src/api2/access.rs
@@ -115,7 +115,7 @@ fn authenticate_2nd(
     response: &str,
 ) -> Result<AuthResult, Error> {
     let challenge: TfaChallenge = Ticket::<ApiTicket>::parse(&challenge_ticket)?
-        .verify_with_time_frame(public_auth_key(), "PBS", Some(userid.as_str()), -120..240)?
+        .verify_with_time_frame(public_auth_key(), "PBS", Some(userid.as_str()), -60..600)?
         .require_partial()?;
 
     let _: () = crate::config::tfa::verify_challenge(userid, &challenge, response.parse()?)?;