2amigos / 2fa-library Goto Github PK

composer file should have php-gd as a requirement

Hello,
I'm getting the following error when calling

$manager->verify($code, $secret);

The variable $secret does contain the correct secret and isn't empty.

I'm generating the secret using

$manager->generateSecretKey();

Some examples of secrets which are throwing the error:

TFU7CE5TXHMMPHQ2
3UAJ4P5MDQE2GLD3

The protected function validateOneTimePassword in the Manager class only returns a boolean value, which results in the verify function also only returning a boolean.
However, it should return $startTime if $previousTime was passed as described in the documentation.

I think this must be a mistake. Qr library is only required in dev environment. This brokes functionality when deployed to production environment.

Problem 1
    - 2amigos/2fa-library 2.0.0 requires paragonie/random_compat ^1.4|^2.0 -> found paragonie/random_compat[v1.4.0, ..., v1.x-dev, v2.0.0, ..., v2.0.21] but the package is fixed to v9.99.100 (lock file version) by a partial update and that version does not match. Make sure you list it as an argument for the update command.

There is already 9.99.100 but your composer says 9.99.99. I believe, you should use ^9.99.99?

Why is the versioning 9.99 by the way? There are 1.x and 2.x trees, what is the 9.99 tree?