Add 2FA

[Egrirt]

Hi there, I love the idea of this app! However, some websites nowadays force users to use 2FA codes.
How hard would it be to implement a solution for that?

Thanks for all the work!

[JonBunator]

Not so easy, I would say. Here's what I think would be possible:

• E-Mail 2FA: Doable -> The system must have access to your e-mail account.
• SMS 2FA: Hard -> It's possible but you would have to run a second application on your phone that can send the code to the server. You also have to make the server accessible outside of your network
• Authenticator Apps: Very hard -> I think there is no easy way to access the code inside the authenticator app

I can imagine implementing 2FA for email in the future. But at the moment I want to add more important things first :)

[Egrirt]

Thanks for your reply and understanding!
Have a great weekend :)

[Egrirt]

I have been thinking. For TOTP you could use https://pyauth.github.io/pyotp/ and use the TOTP secret key to be able to serve time based OTP authentication in real time. Just food for thought

[JonBunator]

Hmmm I didn't know that you can register two authenticators for the same service. But if so, this should be fairly easy to implement

[Egrirt]

As long as you have the secret you can use more than one authenticator. For example I have the authenticator for my websites running both on my iPad and iPhone

[karserasl]

For sure you should implement the 2FA since, lets face it, everyone should use 2FA anyway

Just give an option to put the TOTP string in (uri or secret) and use a library like @Deux01 said, to get the TOTP live on execution.

[JonBunator]

Sure, I agree. I want to add notifications support first. Then I'll start to work on 2FA

[lollenderrofler]

Prowlarr uses 2FA for the indexer TorrentLeech. You just have to put the 2FA-secret in the form. Maybe that helps you a little.

[saddle-gaudier-06]

I see a spot to enter the 2FA-secret, but it’s not working for me. Is this still in process?

[JonBunator]

I see a spot to enter the 2FA-secret, but it’s not working for me. Is this still in process?

@saddle-gaudier-06 You mean the pin field? This is used for additional pins which are required on some sites. 2FA is not implemented yet