search

p2-inc / keycloak-magic-link

Magic Link Authentication for Keycloak
Other
217 stars 43 forks source link

Use in combination with multiple factors #63

Closed firstdorsal closed 7 months ago

firstdorsal commented 7 months ago

Hi, I would like to use WebAuthn or TOTP as second factor with the magic links.

Currently if i create a flow like this: image

The second factor is just skipped instead of working with the default Username Password Form image

xgp commented 7 months ago

This implementation of Magic Links doesn't support a continuation of an existing Authentication Flow. Because it is designed to be able to be opened on a different device, it creates an entirely new authentication session when the link is opened.

xgp commented 7 months ago

I think you'd probably be best served with this experiment https://github.com/stianst/keycloak-experimental/tree/main/magic-link which keeps the same session.

Thanks for your constructive opinion on what use case is most important. I'm stunned that anyone has found this extension useful.