2FA auth for Inyoka - Githubissues

inyokaproject / inyoka

All-in-one portal software

http://inyokaproject.org

Other

14 stars 4 forks source link

2FA auth for Inyoka #1248

Open chris34 opened 2 years ago

chris34 commented 2 years ago

Basic task: Add two factor authentication to Inyokas login, as that is a standard by now. (was f.e. requested in https://forum.ubuntuusers.de/topic/2fa-fuer-ubuntuusers/)

[ ] decide, whether to offer OTP and/or FIDO
[ ] check which integration fits our needs. Spontaneous candidates could be
- https://github.com/jazzband/django-two-factor-auth (seems to support only OTP spontaniously)
- https://github.com/django-otp/django-otp (used by django-two-factor-auth, 'more low-level')
- https://pypi.org/project/django-fido/ (marked as beta)
- https://pypi.org/project/django-mfa2/ (supports OTP and FIDO and more)
- https://pypi.org/project/django-mfa3/ (marked as beta, by design only supports FIDO2 and TOTP compared to (nor related) django-mfa2, see drawbacks/comments in README)
- https://developers.yubico.com/python-fido2/ (used by django-mfa2, 'more low-level')
[ ] add option to make it for some user groups a requirement?

chrysle commented 3 months ago

Great! I'll have a thorough look at this.