search

iMerica / dj-rest-auth

Authentication for Django Rest Framework
https://dj-rest-auth.readthedocs.io/en/latest/index.html
MIT License
1.67k stars 314 forks source link

2FA integration through third-party solutions #550

Open DvaMishkiLapa opened 1 year ago

DvaMishkiLapa commented 1 year ago

I realize the obvious answer is to do it yourself, but still. I have been trying to find third party solutions that would allow me to enable 2FA support in my API Django app.

After spending a long time with django-allauth-2fa, I realized that this option will definitely not work.

Are there any tools that will work? Or is it still easier to set up this process on my own, using something as simple as django-otp for example?

oussjarrousse commented 11 months ago

django-allauth[mfa] should have replaced django-allauth-2fa. Would that work? https://docs.allauth.org/en/latest/mfa/index.html

oussjarrousse commented 10 months ago

REST support for MFA is a necessary feature especially for email authentication and especially for staff accounts. Django-allauth are a little bit behind on this.

I found that django-mfa2 offers several options such as OTOP, FIDO2, U2F, Trusted Devices, U2F, email and Recovery tokens.

What does the maintainers thinks about MFA and REST support for MFA?