search

ddspringle / framework-one-secure-auth

An example fw/1 application with secure single and two-factor (2FA) authentication and session management functions
Apache License 2.0
31 stars 5 forks source link

Combine with 2FA example #5

Closed ddspringle closed 7 years ago

ddspringle commented 7 years ago

Instead of having two distinct examples, it's feasible to include configuration options to determine if single or two factor authentication is desired for any particular application and implement each respectively.

Requires migrating 2FA specific functionality to this project, modifying them as required, adding a configuration option for single or two-factor auth selection and firing off appropriate views as needed. Also requires an update to README, and removal of the code in the 2FA project and redirecting users here in that README.

ddspringle commented 7 years ago

I've created a new branch called legacy from the master branch before committing the new code which is breaking.

If you're currently using this code in production and want to upgrade to the latest master then you'll have to reconfigure your database for the additional fields and tables required for 2FA integration, assign existing users phone numbers and provider id's before they can login with 2FA enabled (disabled by default, but the user table, at the very least, will need to be expanded if not using the 2FA option).

ddspringle commented 7 years ago

I've created a legacy branch in the 2FA example code, removed all code from the master branch and updated the README to reflect this code has been rolled into the SA codebase.