Add support for TOTP - Githubissues

majewsky / portunus

Self-contained user/group management and authentication service

GNU General Public License v3.0

78 stars 5 forks source link

Add support for TOTP #27

Open SuperSandro2000 opened 1 year ago

SuperSandro2000 commented 1 year ago

What Works:

[x] generate a totp key
[x] check if the user saved the secret and can generate a token before enabling TOTP and saving the secret to the database

TODO:

[ ] check TOTP when logging in
[x] render QR code on selfservice page
[x] load collapse state when when visiting selfservice page
[ ] allow admin to disable totp

SuperSandro2000 commented 1 year ago

@majewsky FYI

SuperSandro2000 commented 10 months ago

Update: I moved the TOTP configuration to a sub page which simplified a lot of weird conditions. Also the qrcode is now displayed via data: and TOTP can be disabled again.

The most important part now is that the code is actual checked on log in and that admin's can disable it for users that forgot it.