There is also a ticket: https://code.djangoproject.com/ticket/25612 "django.contrib.auth should include support for 2fa out of the box".
On Sunday, January 15, 2017 at 6:22:30 AM UTC-5, Florian Apolloner wrote: > > Hi, > > yes we'd very much like to have 2fa in Django. At the minimum we'd like to > support TOTP and U2F. The idea on why exactly those two is relatively > simple: They either cost nothing or are low cost and the two are so > different that if they both work, most other authentication flows will > probably work too. > > I am not aware of any prior work for django.contrib. Either way, changes > like this will require an idea first and then a DEP (which I'll happily > shepard). > > Cheers, > Florian > > On Sunday, January 15, 2017 at 11:47:56 AM UTC+1, ludovic coues wrote: >> >> Hello, >> >> After reading the recent thread on authentification in django, I >> wondered about the chance of getting a 2-step auth mechanism in >> django.contrib. >> >> Time based one time password, or TOTP, is now part of the RFC 6238. >> For those who don't know it, it use a shared secret and current time >> to produce 6 digit number. That number change every 30 seconds and is >> used to confirm login after entering a correct username and password. >> >> As far as I can tell, there is no such thing present in django >> currently. But I don't know if it's because nobody have done the work >> or if there are reason to not include 2-step solution in django. >> >> -- >> >> Cordialement, Coues Ludovic >> +336 148 743 42 >> > -- You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/django-developers. To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/850e461c-87bb-4bec-bc47-9fa26609b08a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
