5

Give another option to use built-in qrcode generator rather than using Google service


Avatar
arafatx

I look into 2 step authentication post output and saw DA was trying to fetch an OPT qr code by providing sensitive information to google via query:

https://chart.googleapis.com/chart?chs=200x200&chld=M|0&cht=qr&chl=otpauth%3A//totp/admin%40server%2Ezencloud%2Ecom%3Fsecret%3D2QOKIM3QTXACRTAC%26issuer%3DDirectAdmin%27

maybe DA can give us a choice whether to use a built-in otp qr code generator or use it from Google.

I notice also, the chart is actually a deprecated API. Should we remove this?

https://developers.google.com/chart/image/

What do you think about this?

A

Activity Newest / Oldest

Avatar

shanti

your can use linux-tools in the post-hooks like:
BASE64PNG=`printf ${passwd} | qrencode -o - -l H -v 4 -t PNG | base64`


E

Erulezz

Yep, it's deprecated for a long time now and it's time to replace this. And not use an external service for this.