invidious icon indicating copy to clipboard operation
invidious copied to clipboard

Add support for 2FA (OTP, U2F)

Open Perflyst opened this issue 5 years ago • 15 comments

Please add support for OTP (HOTP) and/or U2F. I am sure there are some librarys for this.

I personally prefer U2F as second factor more than OTP.

Perflyst avatar Mar 18 '19 18:03 Perflyst

I assume this is for Invidious login, could you provide any more details on implementing them or what apps/devices they should be tested with?

omarroth avatar Mar 20 '19 01:03 omarroth

Well OTP is always probably the same. You can use a Nitrokey, Yubikey or also command line tools. For U2F I personally can test with a Nitrokey.

Perflyst avatar Mar 20 '19 13:03 Perflyst

+1

This will increase account security. I always like services that support OTP for accounts. If invidious gets hacked the passwords get leaked accounts are still secure due to 2FA.

trymeouteh avatar May 31 '19 20:05 trymeouteh

i want to ask if there is any news on this feature ? (OTP or U2F (FIDO))

BirdInFire avatar Jun 16 '20 15:06 BirdInFire

on the who, there is a library (MIT Licence) : https://github.com/lelag/otphp in php for doing OTP on login

BirdInFire avatar Jun 16 '20 16:06 BirdInFire

Unfortunately Invidious is programmed in Crystal so a php library won't be compatible. Fortunately there are libraries for this and I'll be working on implementing it very soon!

syeopite avatar Jun 14 '21 12:06 syeopite

Unfortunately Invidious is programmed in Crystal so a php library won't be compatible. Fortunately there are libraries for this and I'll be working on implementing it very soon!

There is a library for crystal here: https://github.com/philnash/crotp

unixfox avatar Jun 14 '21 13:06 unixfox

I'm aware. I'm currently just waiting for the maintainer to officially support Crystal 1.0 but I'll go ahead and fork it if needed.

syeopite avatar Jun 14 '21 13:06 syeopite

any news on this ?

BirdInFire avatar Dec 20 '21 12:12 BirdInFire

No, a PR https://github.com/iv-org/invidious/pull/2254 is pending but we still don't have the time yet for finishing it.

But if you want to contribute to the pull request you are free to do so :)!

unixfox avatar Dec 20 '21 12:12 unixfox

The PR is mostly done, but we first need a database migration framework.

SamantazFox avatar Dec 20 '21 12:12 SamantazFox

No, a PR #2254 is pending but we still don't have the time yet for finishing it.

But if you want to contribute to the pull request you are free to do so :)!

i'm open to help but i do not know anything on crystal, so i can't help for that, will simply wait just wanted to know if we can hope to see it soon for up to date instance or if i must continue without it for now).

The PR is mostly done, but we first need a database migration framework.

Thanks for the answer ;)

BirdInFire avatar Dec 20 '21 16:12 BirdInFire

No, a PR #2254 is pending but we still don't have the time yet for finishing it.

But if you want to contribute to the pull request you are free to do so :)!

any news ?

BirdInFire avatar Jun 20 '22 12:06 BirdInFire

No, a PR #2254 is pending but we still don't have the time yet for finishing it. But if you want to contribute to the pull request you are free to do so :)!

any news ?

No, the developer that worked on this feature, syeopite, left the project so nobody is working on this feature anymore.

unixfox avatar Jun 20 '22 14:06 unixfox

No, a PR #2254 is pending but we still don't have the time yet for finishing it. But if you want to contribute to the pull request you are free to do so :)!

any news ?

No, the developer that worked on this feature, syeopite, left the project so nobody is working on this feature anymore.

quite saf

BirdInFire avatar Jun 20 '22 19:06 BirdInFire