Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Add 2FA to Admin Authentication #3695

Open
gondolyr opened this issue Apr 15, 2024 · 1 comment
Open

[Feature] Add 2FA to Admin Authentication #3695

gondolyr opened this issue Apr 15, 2024 · 1 comment
Labels
admin Issues related to the Admin portion API A new API is required backlog Ideas that might be cool and can be looked into later. enhancement New feature or request go backend Server-side code written in Go Web frontend Issues dealing with the web site

Comments

@gondolyr
Copy link

gondolyr commented Apr 15, 2024

It would be a good security addition to add 2FA as an option, particularly WebAuthn, so that we can use security keys such as the YubiKey or Nitrokey. It would help mitigate attack methods, such as brute-force, from attackers accessing the admin settings. As far as I can tell, the username cannot be changed from "admin" so an attacker would probably only need to start guessing the password.

Resources:

@gabek
Copy link
Member

gabek commented Apr 16, 2024

This is unlikely to be anything that I work on in the near future, but I'll keep this open in case somebody would be interested in looking into it.

@gabek gabek added enhancement New feature or request Web frontend Issues dealing with the web site backlog Ideas that might be cool and can be looked into later. API A new API is required admin Issues related to the Admin portion go backend Server-side code written in Go labels Apr 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
admin Issues related to the Admin portion API A new API is required backlog Ideas that might be cool and can be looked into later. enhancement New feature or request go backend Server-side code written in Go Web frontend Issues dealing with the web site
Projects
None yet
Development

No branches or pull requests

2 participants