Yourls: MFA Login

[Noiden]

I would like more security and therefore request MFA support.

A Google-authenticator implementation. So you can use other apps also, like Authy.

Thanks.

[ozh]

See existing plugins. Also, see wiki page "Possible with a plugin".

[dgw]

@ozh I could not find any plugins that implement 2FA, neither in web search nor in the awesome-yourls list. Don't you think it would be a good feature to add into core? I do.

[Noiden]

I can't either find any plugin with this and I think as @dgw that it would be nice in the core.

Anyway, if any plugin coder see this, please make a plugin for this. =)

[ozh]

I think that's definitely overkill to add to core (95% of average users will never use this) and a typical use case for plugins. Indeed a 2FA plugin would be a super thing to have. I think there are several Google Authenticator PHP libs, it should be rather easy to make one. Maybe I'll give a stab when I have some time

[dgw]

Maybe it can be a core plugin. The 95% of users who won't make use of it probably _should_, but don't because they're not security-conscious. YOURLS should help with that, not leave them to be ignorant.

[ozh]

Totally open to have a core plugin with this, if the plugin is quality

[ozh]

Side note: https://github.com/PHPGangsta/GoogleAuthenticator seems to be the easiest and most compatible lib