Login using OTP sent to email about django-allauth HOT 6 OPEN

I made a little PoC for a feature like this, I've pushed that here:

https://github.com/pennersr/django-allauth/tree/feat-otp-login

It's functional but definitely not finished. Would appreciate it if you could give it a test spin to see if this matches your use case.

MFA_EMAIL_OTP = True.

from django-allauth.

FWIW -- it's reusing the regular mfa flow:

from django-allauth.

Hi @pennersr
I hope this feature will make it to the next update. 😉️

from django-allauth.

Thanks for this. below is my use case and some of my own opinions.

Use case: I want to send OTP on user login, redirect the user to the OTP confirmation page, verify the OTP and then send them to their dashboard (or any page I desire).

Opinions:

• Many people are not familiar with the workings of authenticator apps and some people do not want to install yet another app, so the idea of an Email OTP system comes into play. Email 2FA is very popular, especially in my region.
• I believe it should be a global setting. We can activate it globally and require users to provide the OTP code from their email before they can log in.
• Yes, it will require ACCOUNT_EMAIL_REQUIRED to be true.
• The global setting could be something like EMAIL_OTP_VERIFICATION = True.

from django-allauth.

I made a little PoC for a feature like this, I've pushed that here:

https://github.com/pennersr/django-allauth/tree/feat-otp-login

It's functional but definitely not finished. Would appreciate it if you could give it a test spin to see if this matches your use case.

MFA_EMAIL_OTP = True.

Thank you for this. I will test it and share feedback with you.

from django-allauth.

Hi,
I just tested it and this is exactly what I need!

I got the OTP, entered it and the user was sent to the dashboard!

Thank you.

from django-allauth.