We were double encrypting OTP keys, and it made my head hurt

diff --git a/app/models/user.rb b/app/models/user.rb
index 7edf9b5adb5743ea1b860dadfb4daea2cff3462b..1726c37d750cc82d146c64a7093f0f6401b1bf6e 100644 (file)
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -3,8 +3,7 @@ class User < ApplicationRecord
   # :confirmable, :lockable, :timeoutable, :trackable and :omniauthable
   devise :database_authenticatable, :registerable,
          :recoverable, :rememberable, :validatable,
-         :confirmable, :lockable, :two_factor_authenticatable, :two_factor_backupable,
-         otp_secret_encryption_key: Rails.application.credentials.dig(:active_record_encryption, :primary_key)
+         :confirmable, :lockable, :two_factor_authenticatable, :two_factor_backupable
 
   encrypts :otp_secret
   attr_accessor :otp_plain_secret