If local MFA is configured, and user logs in through GSS, make sure to trigger verification

pondersource / nextcloud-mfa-awareness

Make Nextcloud aware of whether the current user is logged in with Multi-Factor Authentication

MIT License

0 stars 2 forks source link

If local MFA is configured, and user logs in through GSS, make sure to trigger verification #72

Open michielbdejong opened 10 months ago

michielbdejong commented 10 months ago

Micke reported that if local MFA is configured, and the user logs in through GSS, verification is not triggered. So maybe we should trigger it from our app in that case? Be careful never to trigger verification if MFA is not configured for the current user, because that will (IIUC) lead to the 'token not found' internal server error we saw with some earlier versions of the code.

michielbdejong commented 9 months ago

@mrvahedi68 in your #sitdown message on Slack you said

Need to check how to login from GSS.

-> here it is! https://github.com/pondersource/nextcloud-mfa-awareness/blob/main/servers/setup-gss.sh :slightly_smiling_face:

michielbdejong commented 6 months ago

This was now also implemented by https://github.com/SUNET/nextcloud-stepupauth/releases/tag/v0.2.0 although I have to code it into the Dockerfile and init script and look into #68.