2FA

[danharrin]

No description provided.

[binaryfire]

I recently implemented 2FA and had to make it pretty flexible, so figured I'd share some feedback:

• I needed it to be configurable per guard because I've got both Admin and Member models, and each has different security requirements
• The option to enforce it for all users was also configurable per guard
• All the options (enable/disable/enforce) were implemented as settings in a landlord panel, so it'd be great to make everything dynamically configurable rather than hardcoded in the config file
• I used the session to store the 2FA auth status so I could programmatically mark it as completed when using my custom SSO (SSO logins normally skip 2FA since the SSO provider handles it).