<![CDATA[Optional 2FA for proxy auth?]]>This isn't really a big deal, and I'd guess quite probably not really possible either but...

I've got 2FA set-up on my account because I don't want anyone gaining access to Cloudron admin.

But for nearly all the apps that have proxy auth added, 2FA is overkill and it mildly frustrates me that I have to get my phone out to generate a 2FA code using my FreeOTP+ authenticator app.

I'd love there to be a way where 2FA is enforced for logging into Cloudron dashboard, but not when logging into (at least some) apps.

Like I said, this isn't really a big deal, and I'd guess quite probably not really possible either but figured I'd mention it anyways 🙂

]]>https://forum.cloudron.io/topic/10384/optional-2fa-for-proxy-authRSS for NodeTue, 09 Jun 2026 14:29:59 GMTThu, 09 Nov 2023 12:56:07 GMT60<![CDATA[Reply to Optional 2FA for proxy auth? on Thu, 09 Nov 2023 13:06:18 GMT]]>@girish said in Optional 2FA for proxy auth?:

@jdaviescoates proxyAuth will move to OIDC based login very soon. Once that is done, hopefully you don't have to deal with this much (because it will automatically login for other apps).

Ah yes, I figured that might soon be the case. Excellent, I think that'll basically solve it 🙂

@girish said in Optional 2FA for proxy auth?:

On a general note, it's not possible to disable 2FA since this will be a security hole which bypasses 2FA 🙂 As in, one can keep trying username/password combinations without a 2FA now and know if it's valid or not.

Figured there'd be a good reason not to do it 🙂

]]>https://forum.cloudron.io/post/77082https://forum.cloudron.io/post/77082Thu, 09 Nov 2023 13:06:18 GMT<![CDATA[Reply to Optional 2FA for proxy auth? on Thu, 09 Nov 2023 13:04:10 GMT]]>@jdaviescoates proxyAuth will move to OIDC based login very soon. Once that is done, hopefully you don't have to deal with this much (because it will automatically login for other apps).

On a general note, it's not possible to disable 2FA since this will be a security hole which bypasses 2FA 🙂 As in, one can keep trying username/password combinations without a 2FA now and know if it's valid or not.

]]>https://forum.cloudron.io/post/77081https://forum.cloudron.io/post/77081Thu, 09 Nov 2023 13:04:10 GMT