#vault

2 posts · Last used 3d

Back to Timeline
Markus Eisele @myfear@mastodon.online · 4d ago
Vault's TOTP API can validate a six-digit code. That is not yet a complete MFA flow. This Quarkus tutorial adds the missing boundaries: authenticated subject, stored enrollment mapping, strict input validation, a two-minute step-up JWT, normal RBAC, and a replay test against a patched Vault runtime. https://www.the-main-thread.com/p/quarkus-vault-totp-step-up-auth #Java #Quarkus #Vault #TOTP #APISecurity
0
0
0

You've seen all posts