search

matteo-convertino / otpmanager-nextcloud

Nextcloud app that allows you to manage your OTP (TOTP/HOTP) codes easily
GNU Affero General Public License v3.0
25 stars 5 forks source link

Feature: Disable Authentication #16

Closed meichthys closed 7 months ago

meichthys commented 10 months ago

Perhaps there's a security issue to prevent this, but would be nice if it could be disabled in order to rely on Nextcloud's built-in authentication/2fa/security features to protect access to the otpmanager app.

meichthys commented 10 months ago

@matteo-convertino Sorry, this belongs on the server component, Can you move it?

meichthys commented 10 months ago

Also, (if possible) it would be nice if the Password field was auto-focused to prevent the user from having to click into the field before typing).

Very petty (i know), but it would streamline the login process when logging in and out often.

matteo-convertino commented 10 months ago

Regarding the password I can tell you that right now it cannot be disabled, because it was designed to protect the accounts even during communication/synchronization with the app and to not have the secret keys in clear text on the database.

I like petty things (it's the little details that make the difference). It is very useful to have the password field auto focus.

meichthys commented 10 months ago

Totally understandable. Thanks for the clarification.

matteo-convertino commented 7 months ago

I just published the release with the possibility to remember the password, so as not to enter it every time, and with autofocus on the text input of the password.

meichthys commented 7 months ago

Great to see all these improvements being implemented. Great work!