search

owncloud / twofactor_totp

🔑 Second factor TOTP (Google Authenticator) provider for ownCloud
GNU Affero General Public License v3.0
9 stars 9 forks source link

Secret key is only shown in user -> personal -> security context but not at first login with enforced 2FA #316

Closed dn1s closed 1 month ago

dn1s commented 5 months ago

When I enforce two-factor authentication to all users in admin -> security and login for the first time I'm only presented with a QR code. Which works if you have an app which can scan qr codes but if you don't have a mobile phone and would need the secret key for your 2fa to work you are locked out basically. My suggestion is that when a user is first successfully login in we present the user with a qr code and secret. My php skills are quite bad but I managed to add the secret key to the login form like this:

owncloud_topt

dn1s commented 1 month ago

This can be done with overwriting challenge.php in a custom theme: https://github.com/owncloud/docs/issues/1338 I'll close this issue since it's resolved for me