search

e107inc / twofactorauth

Two-Factor Authenthication (2FA) for e107
2 stars 2 forks source link

Option to make 2FA mandatory #1

Open Moc opened 3 years ago

Moc commented 3 years ago

The option to make 2FA mandatory, required during signup. (and no option to turn it off, only add a new account). ie. no 2fa, no login, period.

Perhaps also filter on userclass so, for example, the main admin could obligate all admins to use 2FA.

(Thanks @CaMer0n)

Moc commented 1 month ago

@CaMer0n In order to do this I need some guidance. This plugin uses an e_user.php file to create a new EUF. It displays a text link (enable/disable) in the usersettings page.

I need some way to add a check whether or not the EUF (secret_key) has been filled or not, to determine whether or not 2FA has already been enabled, and then a way to force the user to enable it.

In case of a textbox or dropdown EUF it's easily done, but how to do it in this case?