MFA for login

[gentilsol]

I find for the security of the accounts as well as for the Admin access, it would be still nice if one could activate a MFA

[balzack]

I'll add this to the backlog. I see this being important as the project matures. I have other features I currently see as higher priority, but if people start requesting MFA, I will increase the priority.

[TheHung184]

Hi, thank you for great tool. I also would like to have MFA ( maybe TOTP first ? ). I have recently experienced attach on my server so i really concern about security.

[balzack]

A quick glance in this area suggest integrating with FreeOTP, would this be a good first solution?

I have one small mobile release to make and then I will work on this feature afterwards.

[balzack]

+ @ZedSphere @gentilsol

I am working on this feature now. I am not sure if the admin dashboard should require 2FA for access, what is your opinion?

My concern is that if the admin makes a mistake configuring 2FA, they would need to manually update the database with the sqlite command from within the container. I think this would be too technical for most people.

I am currently leaning towards having 2FA with TOTP for account login, but leaving the admin login as it is, but could easily be convinced otherwise.

[balzack]

I was convinced otherwise, will add totp for admin access as well.

[ZedSphere]

+1 for this idea.