Feature Request: Only allow OAuth service login if user has 2FA enabled

cosmocode / dokuwiki-plugin-oauth

Generic oAuth1 and oAuth2 plugin for DokuWiki

http://www.dokuwiki.org/plugin:oauth

32 stars 79 forks source link

Closed divadsn closed 2 weeks ago

divadsn commented 3 months ago

Some services like Discord return information back whether an user has 2FA enabled on their account or not.

An option to only allow OAuth login for users that have 2FA enabled on that service might reduce the risk of account hijacking.

splitbrain commented 2 weeks ago

Since info about enabled oauth is service specific, this would need to be implemented in the individual oauth provider plugins.