On PieFed World v1.1.7-13-ge3e624cc, currently only Passkeys and OAuth authentication is supported in the settings. I’m not sure if Piefed Social latest v1.3.6 version supports TOPT 2FA or if this issue is only pertaining to Piefed World instance.

If this feature is missing, kindly add a new feature to support TOPT 2FA based authentication. Thanks…

  • sga@piefed.socialEnglish
    1·
    6 months ago

    I am actually surprised why it is not already there? Please correct me if I am wrong, but is not totp like easier to implement than the other oauths listed? (iirc, it has something to with current seconds since epoch, some integer divide by 30 (or 60) and a cipher, and that is part of pair or something)

    I tried to lookup, and found https://pyauth.github.io/pyotp/. I do not know what is piefed’s policy on using readymade libraries (i know they are really lean on stack, but if i am not wrong, this library would be really light, and will likely just need a database to store the key (likely the passwords db)

    here is the src code for above lib - https://github.com/pyauth/pyotp

  • erebion@news.erebion.euEnglish
    01·
    3 months ago

    TOTP really is not a good idea nowadays. I’d rather see WebAuthn. It’s modern and actually efficiently protects against many things TOTP is supposed to protect against and even more threat vectors.