Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add "Trusted Devices" functionality #50

Open
runelaenen opened this issue Feb 21, 2023 · 0 comments
Open

Add "Trusted Devices" functionality #50

runelaenen opened this issue Feb 21, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@runelaenen
Copy link
Owner

Getting asked for a 2FA code every time you login gets tiresome really quickly. To make it a bit more user-friendly we should add the option to 'trust' a device.

To do

  • Add 'Trust this device' checkbox on login
  • If checked, remember combination of UUID and browser user agent on the customer
  • On newer logins, frontend should send UUID and user agent instead of 2FA code. If a trusted browser with these settings is found, the 2FA can be skipped.
  • Add administration view to manage 'My trusted devices'
  • Add setting to disallow the use of trusted devices

Initially, I would like to build this only for administration logins. Storefront logins have a much longer TTL so the issue is less important there.

@runelaenen runelaenen added the enhancement New feature or request label Feb 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant