Design a identity verification procedure absent the JWT which:
Uses a one-time password which is sent to a user. #2994
Allows administrators to configure a initial timeout (i.e. a timeout of when it must be used by). #3569
Allows a duration of session elevation which the administrator can configure both a an inactivity (i.e. when no privileged actions were completed within that time-frame) and hard timeout (i.e. if the elevation occurred at x, and the admin configures y, if the time is past x + y then it's timed out regardless of the inactivity) for.
Allow admins to configure what these codes are able to do:
Use as a 2FA option. #2035
Register first 2FA option. #1319 and partially #135
Register any 2FA option (current).
Ensure we generate recovery codes for a user which can be used to override 4.2's restriction. #1319
Feature Request
Description
Critical: #135Design a identity verification procedure absent the JWT which:
Use Case
N/A