New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

2FA auth for Inyoka #1248

Open

3 tasks

chris34 opened this issue Sep 17, 2022 · 1 comment

Labels

enhancement portal security

Member

chris34 commented Sep 17, 2022

Basic task: Add two factor authentication to Inyokas login, as that is a standard by now. (was f.e. requested in https://forum.ubuntuusers.de/topic/2fa-fuer-ubuntuusers/)

decide, whether to offer OTP and/or FIDO
check which integration fits our needs. Spontaneous candidates could be
- https://github.com/jazzband/django-two-factor-auth (seems to support only OTP spontaniously)
- https://github.com/django-otp/django-otp (used by django-two-factor-auth, 'more low-level')
- https://pypi.org/project/django-fido/ (marked as beta)
- https://pypi.org/project/django-mfa2/ (supports OTP and FIDO and more)
- https://pypi.org/project/django-mfa3/ (marked as beta, by design only supports FIDO2 and TOTP compared to (nor related) django-mfa2, see drawbacks/comments in README)
- https://developers.yubico.com/python-fido2/ (used by django-mfa2, 'more low-level')
add option to make it for some user groups a requirement?

chris34 added security enhancement portal labels

Contributor

chrysle commented Aug 13, 2024

Great! I'll have a thorough look at this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment