search

Romern / syncMyMoodle

Synchronization client for RWTH Moodle
GNU General Public License v3.0
73 stars 18 forks source link

FIDO2 Support #122

Open Gameheld opened 4 months ago

Gameheld commented 4 months ago

Currently, only TOTP is supported. Since I only have FIDO2 authentication for my Moodle, it would be great if it would be supported as well.

septatrix commented 4 months ago

That's not really feasible, TOTP is a simple form field which we can parse/fill but FIDO2 must be handled by the browser using JavaScript AFAIK. The alternative here would be to use the Moodle API which can work with a token, however, that would limit support for non-Moodle stuff with RWTH SSO. I think that would be Sciebo, maybe also the video service (OpenCast?) but I am not sure about that

D-VR commented 3 months ago

That's not really feasible, TOTP is a simple form field which we can parse/fill but FIDO2 must be handled by the browser using JavaScript AFAIK. The alternative here would be to use the Moodle API which can work with a token, however, that would limit support for non-Moodle stuff with RWTH SSO. I think that would be Sciebo, maybe also the video service (OpenCast?) but I am not sure about that

+1 Adding TOTP support is easy, having actual FIDO2 support would require more effort. Probably the "easiest" way would be to launch an actual browser window you have to log into with FIDO. This could also be the default fallback if no 2FA method is configured.