cyberia/capsul-flask
9
6
Fork 8
Code Issues 21 Pull requests 5 Projects Releases Wiki Activity

feature request: add 2FA, alternate log-in methods #36

New issue
Open
opened 2022-04-17 12:58:18 +00:00 by localghost · 0 comments
localghost commented 2022-04-17 12:58:18 +00:00
Copy link

There has been a recent request to the ops mailing list for 2FA. This has been requested in the services matrix channel a couple of times as well.

Some thoughts on possible delivery mechanisms:

  • TOTP - input code, login
  • login link is encrypted with pgp key / other key, displayed on webpage. user decrypts with their private key, follows link to login

Some bot/chat mechanisms might also be worth considering:

  • matrix - get login url from bot, login
  • xmpp - send login url from a xmpp bot (we have one at cyberia.top)
  • SMS - above bot is hooked into jmp.chat number, so can send login url by text messages or by voice calls as well.

Personally I think totp would probably be simplest.

There has been a recent request to the ops mailing list for 2FA. This has been requested in the services matrix channel a couple of times as well. Some thoughts on possible delivery mechanisms: * TOTP - input code, login * login link is encrypted with pgp key / other key, displayed on webpage. user decrypts with their private key, follows link to login Some bot/chat mechanisms might also be worth considering: * matrix - get login url from bot, login * xmpp - send login url from a xmpp bot (we have one at cyberia.top) * SMS - above bot is hooked into jmp.chat number, so can send login url by text messages or by voice calls as well. Personally I think totp would probably be simplest.
👍 1
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
rathouse
self-service-change-email
development
jes/add-nixos
docker-test
serial-console-access
ptyhunter
console-access
dhcp-wip
j3s/update-distros
deleteme
autonomic
autonomic-yolocolo
tests-with-logs
tests3
tests2
autonomic-webapi
docs-reshuffle2
mock-hub-create
optional-btcpay
generated-prices
tests
autonomic-public-api-tests
autonomic-docker-api
managed-ips
asd
multiple-hosts
forest-wip
0.1.0
0.0.0
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: cyberia/capsul-flask#36
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?