Trinitycore: Auth Token Implementation

[DerEnderman]

Description:

https://github.com/TrinityCore/TrinityCore/pull/10527

Current behaviour:

Not Implemented

Expected behaviour:

Login Token for more account security.

Steps to reproduce the problem:

No steps!

Branch(es):

both

TC rev. hash/commit:

ab916fd1b37ca39071c2253be68e60ac2a735ada

TDB version: CHANGEME Version of the TrinityCore database

TDB720.00

Operating system: CHANGEME OS

[Infernales]

On branch 3.3.5 works fine.

[DerEnderman]

how you can work with it on 3.3.5A ?

On my 3.3.5A it failes after setting it to 10^8

I tried using https://authenticator.me/

[Infernales]

Through the program "FreeOTP" for Android and iOS.
https://freeotp.github.io/

1. In the first field, enter your email address to which your account is registered.
2. In the second field, enter any code. An example code is given in the program itself.
3. In the "Secret" field, enter the eight-digit secret key.
4. In the "Type" field, set TOTP.
5. In the "Digits" field, set 6.
6. In the "Algorithm" field, set SHA1.
7. In the "Interval" field, set 30.
8. The key from the "Secret" field is added to the column "token_key" in the "account" table in the desired account.

[Shauren]

You need to use google variant @Shoxxo - as the name implies TOTP is time based. Blizzard has their own time service for synchronizing authenticators which gives you different results than time on your pc (so blizz authenticator will not work)

ps. well... it would, if you managed to sync times

[Aokromes]

as PR states:

"
To properly use, set token_key fields with secure key in base32 form, and make sure your server time is set properly - time() returns GMT/UTC time, and ntp is synchronising time on server."

[DerEnderman]

Have build a solution for my server :)

Demo : https://www.noones-wow.com/token.php

Tested on my server and worked for the 3.3.5A version!

[funjoker]

Well kinda advertisment lol.
PS @Shoxxo.
In germany you must have an imprint!
And yes it is germany.

[DerEnderman]

I know. But the ste is under construction without a shop system. So for the moment it is only to test token generation etc. An imprint will come later sure.