firebase-js-sdk icon indicating copy to clipboard operation
firebase-js-sdk copied to clipboard

Published 20 hours ago • verified publisher icon firebase

FR: plans for auth MFA with TOTP or WebAuthn?

Open wvanderdeijl opened this issue 4 years ago • 9 comments
trafficstars

Describe your environment

  • Operating System version: any
  • Browser version: any
  • Firebase SDK version: 8.2.3
  • Firebase Product: auth (auth, database, storage, etc)

Describe the problem

It is great that Multi factor auth is supported with SMS, but this is not considered to be the most secure way of MFA. We are embarking on a sensitive project and are wondering if time based one time passwords (TOTP) or WebAuthn with physical tokens are on the roadmap as MFA methods for Firebase Auth (and Google Cloud Indentity Platform)

wvanderdeijl avatar Jan 15 '21 18:01 wvanderdeijl

Sorry. I tried searching for TOTP issues and couldn’t find any. After filing this issue I found #2123 requesting WebAuthn. when thinking about WebAuthn please also consider TOTP

wvanderdeijl avatar Jan 15 '21 20:01 wvanderdeijl

+1

npwork avatar Oct 14 '21 13:10 npwork

+1

AminAtwi-ITXI avatar Oct 29 '21 23:10 AminAtwi-ITXI

+1

ivstiv avatar Nov 22 '21 15:11 ivstiv

+999999999

Deliana90 avatar Jan 17 '22 14:01 Deliana90

+100000000

theiliad avatar Jul 04 '22 16:07 theiliad

  • 999999999999

arkaydeus avatar Jul 14 '22 21:07 arkaydeus

Some good news from 2 days ago: https://firebase.blog/posts/2022/07/new-firebase-auth-features

johnozbay avatar Jul 28 '22 06:07 johnozbay

Duplicate of https://github.com/firebase/firebase-js-sdk/issues/2123 or the other way round?

akauppi avatar Jul 28 '22 15:07 akauppi

It looks like Firebase finally added this: https://firebase.google.com/docs/auth/web/totp-mfa

tianhuil avatar Sep 26 '23 17:09 tianhuil

TOTP MFA support is released to public, resolving this issue.

Xiaoshouzi-gh avatar Oct 02 '23 03:10 Xiaoshouzi-gh