search

joomla / joomla-cms

Home of the Joomla! Content Management System
https://www.joomla.org
GNU General Public License v2.0
4.73k stars 3.64k forks source link

Improvements for [Two Factor Authentication] #30630

Open universewrld opened 4 years ago

universewrld commented 4 years ago

Is your feature request related to a problem? Please describe.

If you enable Two Factor Authentication on the site, then you will have to enter a temporary code from the application every time you enter the site. This is very inconvenient, especially when you visit the site only from your computer and publish news on the site every day.

Describe the solution you'd like

  1. I suggest adding an option that will allow you to remember the trusted device to log in and not have to re-enter the temporary code from the application. For example: When I first go to the site from my home computer, I can check the "remember this device" checkbox and then when I log in again from this device I will not have to re-enter the temporary code from the application.

  2. Do not show the timecode input field until the user clicks the login button. After the user has pressed the log in button, show him the field for entering the time code from the application. This can be very helpful if I go back to the site from a trusted device, or if I am a user who has not yet enabled Two Factor Authentication in my profile, and therefore should not see the field for entering the time code.

Additional context

I've seen this kind of login method on all popular sites. I've seen this on social media, online shopping and many other sites. I don't see the point of entering this code every time if I visit the site only from the same device. @Joomla is not an application of my bank.

I only want to use the timecode entry on the devices from which I log in for the first time. I mean, there should be an option so that you can "remember the trusted device" and the user can decide for himself whether he will re-enter the code when entering from this device or whether he wants to remember this device as a trusted one.

Now Joomla has only 2 options:

  1. Use Two Factor Authentication
  2. Do not use Two Factor Authentication

I suggest a third option:

  1. Do not enter the code on trusted devices.
ssnobben commented 4 years ago

Yes good suggestions I support them.

This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/30630.