sciordia
commented
1 year ago Another 2-FA option would be to use for example the Pushover notification system. Once the credentials are confirmed, a textfield could appear where you could enter the code sent by pushover to your mobile or desktop app. I think the implementation would be relatively simple and the result would be very professional. The Google Authenticator option is also good.
Do you think that one of the two options (or even both) could be incorporated into Shinymanager? Security issues are very important in our developments and companies are demanding more and more security, only the confirmation of credentials is insufficient.
bthieurmel
I believe that this could be done with a number input after the password for a time-based one-time password (TOTP). Validating the credentials and the TOTP could be done by checking against the Google Authenticator App API outlined here: https://rapidapi.com/chdan/api/google-authenticator/tutorials/easy-two-factor-authentication-(2fa)-with-google-authenticator
In the log-in UI there would also have to be a link to the QR code URL for the user to set up the TOTP.
As an increasing number of organizations are requiring 2-FA this can help data scientists trying to share their work to continue to be compliant with up-to-date security protocols.