Add default settings

7 years ago · ef235c8711
parent b6e7009f31
commit ef235c8711
1 changed files with 5 additions and 1 deletions
--- a/lib/open_project/two_factor_authentication/engine.rb
+++ b/lib/open_project/two_factor_authentication/engine.rb
@ -10,8 +10,12 @@ module OpenProject::TwoFactorAuthentication
             author_url: 'http://openproject.com',
             settings: {
               default: {
+                 # Only app-based 2FA allowed per default
+                 active_strategies: [:totp],
+                 # Don't force users to register device
                 enforced: false,
-                 active_strategies: []
+                 # Don't allow remember cookie
+                 allow_remember_for_days: 0
               }
             },
             requires_openproject: '>= 4.0.0' do