Add TOTP-based two-factor authentication #5109
Conversation
piotrfx
commented
Dec 28, 2025
piotrfx
commented
- Add 2FA setup, enable, disable, and backup code management
- Integrate 2FA challenge flow into login process
- Add frontend modal for 2FA configuration
- Support backup codes for account recovery
- Add 2FA setup, enable, disable, and backup code management - Integrate 2FA challenge flow into login process - Add frontend modal for 2FA configuration - Support backup codes for account recovery
|
Docker Image for build 3 is available on DockerHub: Note Ensure you backup your NPM instance before testing this image! Especially if there are database changes. Warning Changes and additions to DNS Providers require verification by at least 2 members of the community! |
|
Tested locally and works fine, we're adding to our production servers this modified version with 2FA as I'm not sure how quickly this can end up in the main repo ;). I've ran Claude for security checks and all is fine as well. |
|
We're using this modified version and we're happy. The only suggestion I'm considering is to add "How to disable 2FA via CLI". Apart from that, everything looks OK. Maybe someone else has any suggestions? |
|
Fantastic work, very much appreciated :) There's some additions I'll need make to the openapi/swagger docs for the new endpoints prior to official release. |
2 participants
