Method GetSecret

internal/models/factor.go:285–296

(decryptionKeys map[string]string, encrypt bool, encryptionKeyID string)

}

func (f *Factor) GetSecret(decryptionKeys map[string]string, encrypt bool, encryptionKeyID string) (string, bool, error) {
	if es := crypto.ParseEncryptedString(f.Secret); es != nil {
		bytes, err := es.Decrypt(f.ID.String(), decryptionKeys)
		if err != nil {
			return "", false, err
		}

		return string(bytes), encrypt && es.ShouldReEncrypt(encryptionKeyID), nil
	}

	return f.Secret, encrypt, nil
}

func (f *Factor) SaveWebAuthnCredential(tx *storage.Connection, credential *webauthn.Credential) error {
	f.WebAuthnCredential = &MFAWebAuthnCredential{