2FA with pluggable delivery mechanism

Open 01es opened this issue 7 years ago • 1 comments

Description

A two-factor authentication (2FA) support is required to make TG-based application safer out-of-the-box.

The delivery mechanism for security tokens should be pluggable. However, due to popularity of Google Authenticator it is proposed to implement the support for this tool as the default.

https://github.com/samdjstevens/java-totp https://www.allthingsauth.com/2018/04/05/totp-way-more-secure-than-sms-but-more-annoying-than-push/ https://github.com/wstrange/GoogleAuth https://github.com/nayuki/QR-Code-generator https://www.callicoder.com/generate-qr-code-in-java-using-zxing/

Expected outcome

The ability to configure 2FA for TG-based applications.

Feb 27 '18 06:02 01es

As SSO (e.g., Microsoft Entra ID) is generally used in TG-based applications, the priority of this issue is set to P5.

Sep 16 '24 03:09 01es