feature request: 2 factor auth using TOTP

[guzzisti]

Hi,

i'm well aware that there has been discussions about including a "2 factor auth provider" a few years ago.

I widely used and proven 2-factor-authentication method nowaday is TOTP with many free/open source implementations out there (FreeOTP+ for Android, KeePassXC for Linux). As credential theft is more of an issue nowadays than a few years ago, i'd really like to see a 2 factor authentication implemented in the current 3.x branch.

TOTP does not need to include third party services, everything one needs is the server implementation and an app. There are PHP libs for implementing TOTP in an app, for example:
- https://github.com/RobThree/TwoFactorAuth
- https://github.com/Spomky-Labs/otphp

Looking forward for a reply on what you think about this.

kind regards
guzzisti

 

[Rodolfo]

Hi,

Looking forward for a reply on what you think about this.

Do we need 2FA? Yes.

i'd really like to see a 2 factor authentication implemented in the current 3.x branch.

V3.X is on LTS, no new functionality will be added at this time. Keep in mind that V4 development has been already announced so I'm afraid that V3 won't see this.

There are PHP libs for implementing TOTP in an app, for example:
- https://github.com/RobThree/TwoFactorAuth
- https://github.com/Spomky-Labs/otphp

Both seem to be nice alternatives, most likely I will end using one of them.

Thanks for your suggestion.

 

[Rodolfo]

2FA has been pushed to V4.0.

 

[Rodolfo]

🎉 RFC implemented in v4.0.0-beta.10.