Optional 2FA for proxy auth?
-
This isn't really a big deal, and I'd guess quite probably not really possible either but...
I've got 2FA set-up on my account because I don't want anyone gaining access to Cloudron admin.
But for nearly all the apps that have proxy auth added, 2FA is overkill and it mildly frustrates me that I have to get my phone out to generate a 2FA code using my FreeOTP+ authenticator app.
I'd love there to be a way where 2FA is enforced for logging into Cloudron dashboard, but not when logging into (at least some) apps.
Like I said, this isn't really a big deal, and I'd guess quite probably not really possible either but figured I'd mention it anyways
-
This isn't really a big deal, and I'd guess quite probably not really possible either but...
I've got 2FA set-up on my account because I don't want anyone gaining access to Cloudron admin.
But for nearly all the apps that have proxy auth added, 2FA is overkill and it mildly frustrates me that I have to get my phone out to generate a 2FA code using my FreeOTP+ authenticator app.
I'd love there to be a way where 2FA is enforced for logging into Cloudron dashboard, but not when logging into (at least some) apps.
Like I said, this isn't really a big deal, and I'd guess quite probably not really possible either but figured I'd mention it anyways
@jdaviescoates proxyAuth will move to OIDC based login very soon. Once that is done, hopefully you don't have to deal with this much (because it will automatically login for other apps).
On a general note, it's not possible to disable 2FA since this will be a security hole which bypasses 2FA
As in, one can keep trying username/password combinations without a 2FA now and know if it's valid or not. -
@jdaviescoates proxyAuth will move to OIDC based login very soon. Once that is done, hopefully you don't have to deal with this much (because it will automatically login for other apps).
On a general note, it's not possible to disable 2FA since this will be a security hole which bypasses 2FA
As in, one can keep trying username/password combinations without a 2FA now and know if it's valid or not.@girish said in Optional 2FA for proxy auth?:
@jdaviescoates proxyAuth will move to OIDC based login very soon. Once that is done, hopefully you don't have to deal with this much (because it will automatically login for other apps).
Ah yes, I figured that might soon be the case. Excellent, I think that'll basically solve it
@girish said in Optional 2FA for proxy auth?:
On a general note, it's not possible to disable 2FA since this will be a security hole which bypasses 2FA
As in, one can keep trying username/password combinations without a 2FA now and know if it's valid or not.Figured there'd be a good reason not to do it
