diff --git a/src/Http/Middleware/Google2fa.php b/src/Http/Middleware/Google2fa.php index 605f42a..0cc52b3 100644 --- a/src/Http/Middleware/Google2fa.php +++ b/src/Http/Middleware/Google2fa.php @@ -44,6 +44,11 @@ public function handle($request, Closure $next) ->setBlocks(config('lifeonscreen2fa.recovery_codes.blocks')) ->setChars(config('lifeonscreen2fa.recovery_codes.chars_in_block')) ->toArray(); + + $recoveryHashes = $data['recovery']; + array_walk($recoveryHashes, function (&$value) { + $value = password_hash($value, config('lifeonscreen2fa.recovery_codes.hashing_algorithm')); + }); $user2faModel = config('lifeonscreen2fa.models.user2fa'); $user2faModel::where('user_id', auth()->user()->id)->delete(); @@ -51,7 +56,7 @@ public function handle($request, Closure $next) $user2fa = new $user2faModel(); $user2fa->user_id = auth()->user()->id; $user2fa->google2fa_secret = $secretKey; - $user2fa->recovery = json_encode($data['recovery']); + $user2fa->recovery = json_encode($recoveryHashes); $user2fa->save(); return response(view('google2fa::recovery', $data)); @@ -59,4 +64,4 @@ public function handle($request, Closure $next) return response(view('google2fa::authenticate')); } -} \ No newline at end of file +}