Liam Reilly writes:

 > Has anyone successfully got MFA working in Mailman 3 with
 > django-allauth[mfa]?

Define "success".  I don't think you mean what the authors of
allauth.mfa mean. :-)

 > If signed in as a user, I can browse to /accounts/2fa/ to activate
 > MFA, but I was hoping to make it a mandatory part of the Sign Up
 > process. Is there something that needs to be done with the URLs
 > somewhere?

The documentation doesn't say anything about making it "mandatory"
(again, define please -- there are subtleties which would affect the
implementation), but is quite explicit about allowing the user to
activate and deactivate authentication methods.  So I would guess this
is up to you to figure out.

 > This list site is an example of how I'd like it to work:
 > https://mailing-lists.imperial.ac.uk/

Not helpful.  It looks like a pretty standard site from the top page.
But I'm not giving out my private information to people I have no
connection to, and I don't know what sensors they may have attached
looking for mischief.

 > Here is what I added to settings.py:

[...]
 > MFA_ADAPTER = "allauth.mfa.adapter.DefaultMFAAdapter"

You may need to override this module.  Typical changes involve
wrapping the module to change defaults, then invoking the module.

 > # Used to override forms. Defaults to:
 > MFA_FORMS = {
 >     'authenticate': 'allauth.mfa.forms.AuthenticateForm',
 >     'reauthenticate': 'allauth.mfa.forms.AuthenticateForm',
 >     'activate_totp': 'allauth.mfa.forms.ActivateTOTPForm',
 >     'deactivate_totp': 'allauth.mfa.forms.DeactivateTOTPForm',
 > }

In some sense, making it "mandatory" might be as simple as changing
the "activate" form to provide no choice, and to remove the deactivate
form from the urlconf).  That would not be elegant, and would likely
confuse users by presenting them with a useless form.  But I'm just
guessing at this point.

While it's perfectly reasonable to ask here, I think you're most
likely to get useful answers on Django allauth channels.


-- 
GNU Mailman consultant (installation, migration, customization)
Sirius Open Source    https://www.siriusopensource.com/
Software systems consulting in Europe, North America, and Japan
_______________________________________________
Mailman-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/
Archived at: 
https://lists.mailman3.org/archives/list/[email protected]/message/DBTFAA6EO45XATNFLNOW66D3MHF6CEZA/

This message sent to [email protected]

Reply via email to