Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support more types of devices (besides just TOTP) #23

Open
clokep opened this issue Sep 29, 2016 · 2 comments
Open

Support more types of devices (besides just TOTP) #23

clokep opened this issue Sep 29, 2016 · 2 comments
Labels

Comments

@clokep
Copy link
Collaborator

clokep commented Sep 29, 2016

django-otp supports at least TOTP, static, and HOTP. It also provides a separate packages for YubiKey and Twilio support.

We should figure out a way to make django-allauth-2fa check any appropriate 2FA systems when logging in, not just the totp devices. Some information about this is available in the docs: https://pythonhosted.org/django-otp/overview.html#plugins-and-devices

@9mido
Copy link
Contributor

9mido commented Mar 31, 2021

Updating the link since the old one no longer works:

https://django-otp-official.readthedocs.io/en/stable/overview.html#plugins-and-devices

We should focus on supporting Webauthn for this issue. I wrote about why in issue #59. It is a step up from OTP, since OTP is not as secure.

I guess we would need different flows for users who wish to setup OTP versus users who want to setup FIDO2 U2F with webauthn. Webauthn should be able to handle both OTP and FIDO2 U2F though.

@clokep
Copy link
Collaborator Author

clokep commented Mar 31, 2021

As the description said it would be nice if you could configure whatever you wanted and django-allauth-2fa just used it, instead of being hard-coded to assume TOTP is the only type of device.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants