search

NHAS / wag

Simple Wireguard 2FA
BSD 3-Clause "New" or "Revised" License
506 stars 27 forks source link

2FA for Admin portal #77

Open bluecraank opened 10 months ago

bluecraank commented 10 months ago

There should be a option to enable 2fa for admin portal

NHAS commented 10 months ago

You're definitely not wrong. Just dont really want people exposing the admin portal anywhere regardless, I tend to use it over an SSH forward

JSmith-Aura commented 7 months ago

I think what Im going to do for this is just use an OIDC provider to log in instead of implementing 2fa myself. It makes it a bit easier on me.

NHAS commented 1 month ago

I have now added an oidc provider to the admin page which can be configured via the management ui json setting:

    ManagementUI struct {
        usualWeb
        Enabled bool
        Debug   bool

        OIDC struct {
            AdminDomainURL string

            IssuerURL    string
            ClientSecret string
            ClientID     string
            Enabled      bool
        } `json:",omitempty"`
    } `json:",omitempty"`

Still needs so work in terms of, adding the oidc admin to the admin users list. And potentially if people want, restrictions.

NHAS commented 1 month ago

Sweet all that minus the restrictions are done. If people want this to be part of a groups claim or whatnot add it to this issue. Otherwise this feature is now completed