david-loe / abrechnung

Reisekostenabrechnung inkl. automatischer Pauschalen Berechnung auch für internationale Reisen
GNU Affero General Public License v3.0
12 stars 2 forks source link

2FA ideally with FIDO U2F or minimum TOTP #83

Closed Karl-Bee closed 3 months ago

Karl-Bee commented 3 months ago

for security reasons 2 factor authentication would be really great. ideally FIDO U2F (e.g. with Yubikey) or at least TOTP

and a checkbox for the admin to make 2FA mandatory for every user

david-loe commented 3 months ago

Out of scope, as authentication is not part of the app. It's outsourced to LDAP, Email or Azure OAuth. You should implement 2FA in your authentication provider.