private boolean is_right_user ( String username , String publicId ) { log . debug ( "Check if YubiKey {} belongs to user {}" , publicId , username ) ; return this . ykmap . is_right_user ( username , publicId ) ; }
After validation of an OTP check that it came from a YubiKey that actually belongs to the user trying to authenticate .