Fix comment of variance time for Rfc6238

aspnet · Apr 4, 2018 · 77c8cb5 · 77c8cb5
1 parent a24b776
commit 77c8cb5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Microsoft.AspNet.Identity.Core/Rfc6238AuthenticationService.cs b/src/Microsoft.AspNet.Identity.Core/Rfc6238AuthenticationService.cs
@@ -79,7 +79,7 @@ public static int GenerateCode(SecurityToken securityToken, string modifier = nu
                 throw new ArgumentNullException("securityToken");
             }
 
-            // Allow a variance of no greater than 90 seconds in either direction
+            // Allow a variance of no greater than 9 minutes in either direction
             var currentTimeStep = GetCurrentTimeStepNumber();
             using (var hashAlgorithm = new HMACSHA1(securityToken.GetDataNoClone()))
             {
@@ -94,7 +94,7 @@ public static bool ValidateCode(SecurityToken securityToken, int code, string mo
                 throw new ArgumentNullException("securityToken");
             }
 
-            // Allow a variance of no greater than 90 seconds in either direction
+            // Allow a variance of no greater than 9 minutes in either direction
             var currentTimeStep = GetCurrentTimeStepNumber();
             using (var hashAlgorithm = new HMACSHA1(securityToken.GetDataNoClone()))
             {