Think about support for OTP as multi-factor

[phax]

E.g. via FreeOTP or something similar.

See e.g.

• https://medium.com/axgr-dev/how-to-implement-multi-factor-authentication-with-spring-security-bb23aaf874e7
• https://github.com/jchambers/java-otp
• https://github.com/freeotp/freeotp-android