From 542a5d3cb116c5f0dadd6157731945c74236cfa5 Mon Sep 17 00:00:00 2001
From: 0x0fbc <10455804+0x0fbc@users.noreply.github.com>
Date: Fri, 7 Jun 2024 00:16:46 -0400
Subject: [PATCH] bump state/nonce length

---
 src/api/core/two_factor/duo_oidc.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/api/core/two_factor/duo_oidc.rs b/src/api/core/two_factor/duo_oidc.rs
index 27d8a5b4..003f4125 100644
--- a/src/api/core/two_factor/duo_oidc.rs
+++ b/src/api/core/two_factor/duo_oidc.rs
@@ -21,7 +21,7 @@ use crate::{
 };
 
 // State length must be at least 16 characters and at most 1024 characters.
-const STATE_LENGTH: usize = 36;
+const STATE_LENGTH: usize = 64;
 
 // Pool of characters for state and nonce generation
 // 0-9 -> 0x30-0x39