passport-2fa-totp
passport-2fa-totp copied to clipboard
Question : How to ignore if 2FA not setup
I understand this hasn't been updated for a while, but I am wondering if there is a mechinism in place for it to fallback to local authentication only (no 2fa) if the user.secret is not present?
Currently, if user.secret is not present, it just presents the error to the user that it's not confiugured. Ideally i would like to allow login in this case and give a popup to the user reminding them to setup 2FA.
This is because the user is not the one who initiates the account creation, that is done back-end.
Are there any suggestions?
Cheers.