loopback4-starter icon indicating copy to clipboard operation
loopback4-starter copied to clipboard

Two-factor authentication

Open sherif2011 opened this issue 5 years ago • 4 comments

Hello, Any plan featuring two-factor authentication soon in lb? If not, any recommendations what are best npm packages to use for that purpose? Thanks!

sherif2011 avatar Aug 10 '19 01:08 sherif2011

Any update? wondering if you have two-factor authentication already in-place or have a near-future plan to implement? Thanks!

sherifmankarious avatar Aug 14 '19 01:08 sherifmankarious

It’s a really good suggestion. We just implemented otp verification in one of our projects, but it was not authentication.

Do you have any specific use case ? 2-factor auth is a broad topic. If you can share some use case, we may discuss that. Let me know

samarpan-b avatar Aug 14 '19 16:08 samarpan-b

Ultimately our use case is to allow authentication only after trusting the device. So for a first time login through a new device, the user will be directed through the 2FA. User may choose to send the verification code to either an email or a phone, then after verifying the code, user will be allowed to login, and that device will be added to that user's trusted devices.

sherifmankarious avatar Aug 14 '19 17:08 sherifmankarious

@SouravSF can you try sharing your OTP solution here ?

samarpan-b avatar May 05 '20 15:05 samarpan-b