fix: change logic for calc timeout in totp generator

Author: EndyKaufman

libs/feature/two-factor/src/lib/two-factor.service.ts

@@ -35,7 +35,7 @@ export class TwoFactorService {
       // Length of the generated tokens.
       digits: 6,
       // Interval of time for which a token is valid, in seconds.
-      ...(options.timeout ? { period: options.timeout / 1000 } : {}),
+      ...(options.timeout ? { period: Math.floor(options.timeout / 1000) } : {}),
       // Arbitrary key encoded in base32 or `OTPAuth.Secret` instance
       // (if omitted, a cryptographically secure random secret is generated).
       secret: OTPAuth.Secret.fromBase32(options.secret),
@@ -218,7 +218,7 @@ export class TwoFactorService {
       const tokenIsValid =
         totp.validate({
           token: options.code,
-          window: timeout / 1000 / 30,
+          window: 1,
         }) !== null;
 
       if (!tokenIsValid) {