Segs/WebUI

Add optional support for 2FA

Aperta

#10 aperta il 29 ago 2018

 (1 commento) (0 reazioni) (0 assegnatari)CSS (6 fork)auto 404
feature requestgood first issue

Metriche repository

Star
 (6 stelle)
Metriche merge PR
 (Metriche PR in attesa)

Descrizione

@mobbyg mentioned adding support for 2FA in Discord recently. We should allow the optional use of 2FA for increased security. We can leverage the well-known Google or Microsoft authentication apps for this purpose. There are several decent Google Auth libraries implemented in PHP that take care of the heavy lifting already:

https://github.com/PHPGangsta/GoogleAuthenticator (somewhat dated) https://github.com/Dolondro/google-authenticator (somewhat active) https://github.com/chregu/GoogleAuthenticator.php (dated) https://github.com/sonata-project/GoogleAuthenticator (actively maintained)

The web forms will require updating to enable users to enroll/associate and detach an authenticator with/from their account along with challenging them for a one-time PIN after username and password authentication.

Guida contributor