Comments (4)
I think you should provide at least two options, a phone based along with an email based verification in case users cannot access to their phone.
For the phone based method, using SMS might be less efficient than application in the Worldwide range.
I see that privacyIDEA supports TOTP protocol which is supported by very popular Google Authenticator and Microsoft Authenticator app.
Here is a TOTP implementation in Nodejs: https://github.com/speakeasyjs/speakeasy. Hope it can help!
from open-event-next.
I vote for TOTP as we are not/should not require mobile numbers. It is a hassle, SMS are not free and prone to other attacks and not that secure. Mobile numbers are rotated a lot, and thus pose another security threat.
TOTP is easy to implement, free and safe
Server is in python so we need a python solution https://github.com/pyauth/pyotp
from open-event-next.
Hay is the backend written with nodeJS? Then I can take this issue.
from open-event-next.
@mariobehling Can I work on this issue?
from open-event-next.
Related Issues (20)
- Snapshot tests are failing resuting in build failure
- Create front page based on previous design HOT 2
- Add gitpod integration
- Change Material UI theme function
- Set node version to 16.13.2 LTS
- Use only 1 package manager
- Update Material UI to latest version HOT 1
- Create event pages HOT 1
- Create Search Pages HOT 6
- Setup ky instance HOT 2
- feat: License HOT 2
- Add event & group types for tsc
- Setup MUI alerts as reusable components for displaying error and success messages HOT 2
- Setup dayjs
- Add issue and PR templates HOT 3
- Add translate button to the footer as in eventyay.com
- Create a standard way to add search & query filter to url HOT 1
- Write unit & integration tests for the components HOT 3
- Setup scss for project
- Fediverse Integration
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from open-event-next.