search

CZ-NIC / django-fido

Django application for FIDO protocol U2F
GNU General Public License v3.0
27 stars 11 forks source link

Feature idea - provisioning registrations #210

Open variable opened 1 year ago

variable commented 1 year ago

I have a feature request from my workplace to add an approval step for self-registering keys. Currently when someone registers a key, it can be authenticated immediately, the Authenticator model doesn't have a status field to disable the key.

Is this something I can implement and be included into this package?

tpazderka commented 1 year ago

This can be currently (somewhat) achieved by disabling self-registration and using an admin view to add Authenticator to selected users.

As for the proposed change, I am not opposed to it as long as it is an opt-in.

@ziima @stinovlas your thought?

ziima commented 1 year ago

Sounds reasonable

stinovlas commented 1 year ago

I think this might prove useful in our workplace as well. Being able to disable authenticator without removing it sound like a good feature anyway =o).

variable commented 1 year ago

This can be currently (somewhat) achieved by disabling self-registration and using an admin view to add Authenticator to selected users.

As for the proposed change, I am not opposed to it as long as it is an opt-in.

@ziima @stinovlas your thought?

Yeah this is what we have done so far, I have disabled self-registration but work is floating an idea to re-enable it again with approval step.