Optional 2FA for proxy auth?
-
This isn't really a big deal, and I'd guess quite probably not really possible either but...
I've got 2FA set-up on my account because I don't want anyone gaining access to Cloudron admin.
But for nearly all the apps that have proxy auth added, 2FA is overkill and it mildly frustrates me that I have to get my phone out to generate a 2FA code using my FreeOTP+ authenticator app.
I'd love there to be a way where 2FA is enforced for logging into Cloudron dashboard, but not when logging into (at least some) apps.
Like I said, this isn't really a big deal, and I'd guess quite probably not really possible either but figured I'd mention it anyways
-
This isn't really a big deal, and I'd guess quite probably not really possible either but...
I've got 2FA set-up on my account because I don't want anyone gaining access to Cloudron admin.
But for nearly all the apps that have proxy auth added, 2FA is overkill and it mildly frustrates me that I have to get my phone out to generate a 2FA code using my FreeOTP+ authenticator app.
I'd love there to be a way where 2FA is enforced for logging into Cloudron dashboard, but not when logging into (at least some) apps.
Like I said, this isn't really a big deal, and I'd guess quite probably not really possible either but figured I'd mention it anyways
@jdaviescoates proxyAuth will move to OIDC based login very soon. Once that is done, hopefully you don't have to deal with this much (because it will automatically login for other apps).
On a general note, it's not possible to disable 2FA since this will be a security hole which bypasses 2FA
As in, one can keep trying username/password combinations without a 2FA now and know if it's valid or not. -
@jdaviescoates proxyAuth will move to OIDC based login very soon. Once that is done, hopefully you don't have to deal with this much (because it will automatically login for other apps).
On a general note, it's not possible to disable 2FA since this will be a security hole which bypasses 2FA
As in, one can keep trying username/password combinations without a 2FA now and know if it's valid or not.@girish said in Optional 2FA for proxy auth?:
@jdaviescoates proxyAuth will move to OIDC based login very soon. Once that is done, hopefully you don't have to deal with this much (because it will automatically login for other apps).
Ah yes, I figured that might soon be the case. Excellent, I think that'll basically solve it
@girish said in Optional 2FA for proxy auth?:
On a general note, it's not possible to disable 2FA since this will be a security hole which bypasses 2FA
As in, one can keep trying username/password combinations without a 2FA now and know if it's valid or not.Figured there'd be a good reason not to do it
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login