search

AdguardTeam / AdGuardHome

Network-wide ads & trackers blocking DNS server
https://adguard.com/adguard-home.html
GNU General Public License v3.0
23.56k stars 1.73k forks source link

TOTP/ HOTP 2FA for login page #1667

Open ammnt opened 4 years ago

ammnt commented 4 years ago

Hello,

please add TOTP/ HOTP 2FA for login page.

Thank you.

Cheers!

owenvoke commented 3 years ago

Related to this, maybe even WebAuthn support. 🤔 I guess TOTP can be easier to implement sometimes, but WebAuthn would be a great addition.

Update: Passkeys might be a good option to add as well if this ever gets implemented. 🤷🏻

BirdInFire commented 3 years ago

i only ask, any news on this ? (totp) and why not add NtpSec (https://github.com/AdguardTeam/AdGuardHome/issues/2267) support (client at least) to check the hour (for being sure the otp is correct).

ameshkov commented 3 years ago

Nope, no news. But since there're relatively many upvotes, it's time to at least assign it to a milestone.

BirdInFire commented 11 months ago

Nope, no news. But since there're relatively many upvotes, it's time to at least assign it to a milestone.

Any news 3 year later it become quite a long wait...

owenvoke commented 11 months ago

@BirdInFire, looks like this is planned for milestone v0.109, so can't see this happening anytime soon. 😬 It's been nearly 2 years that v0.108 has been in beta.

On a related note, Passkeys might be a good option to add as well if this ever gets implemented. 🤷🏻

BirdInFire commented 11 months ago

@BirdInFire, looks like this is planned for milestone v0.109, so can't see this happening anytime soon. 😬 It's been nearly 2 years that v0.108 has been in beta.

On a related note, Passkeys might be a good option to add as well if this ever gets implemented. 🤷🏻

I lost hope and use authentik before it (for password less login), but their app completely ignore authorization header so I must log twice, and the trick of very long ttl only work if you remember password

shukryshuk commented 8 months ago

any news ? my login page is exposed to public 🫠🫠

ainar-g commented 8 months ago

No news, and you don't need 2FA to make your web interface unavailable from the outside. You can ask around in Discussions to find ways that fit your case.

pictosun commented 2 months ago

Any update concerning 2FA for AGH? Especially when using it via a VPS server this would be a nice feature to have.

winnieyuen commented 1 month ago

No update after 4 years...

BirdInFire commented 1 month ago

No update after 4 years...

The world move to passkey and adguard don't have otp on home .... Up-to-date security I tell.