Integration with django-two-factor-auth and/or django-otp

[moreati]

Gavin, I've made a hacky proof of concept for U2F with django-two-factor-auth moreati/django-two-factor-auth@a44ac23. It doesn't use django-u2f, but it's based heavily on it.

I think the proper route to integration is a django-otp plugin that implements U2F. For the next step the options I see are:

1. Create django-otp-u2f a fork of django-u2f, that is seperate to django-u2f
2. Turn django-u2f into a django-otp plugin. This would:
   • Replace django-u2f's model with a django-otp Device subclass (with migration scripts for the django_u2f.models, if possible/desirable)
   • Replace django-u2f's LOGIN_URL integration with that from django-otp (or possibly django-two-factor-auth)
   • Migrate/replace django-u2f's forms to integrate with django-otp and django-two-factor-auth
3. Keep existing django-Add extra models/forms/views to django-u2f that in

Do you have a preference? Based on simplicity/maintenance mine is the 2nd, but I don't have an existing install base or users.

Are you aware of anybody using django-u2f in anger?

Any other thoughts? Queries?

[moreati]

See also jazzband/django-two-factor-auth#86

[gavinwahl]

I'm conflicted about this. I like the idea of django-u2f being a standalone application, but I don't think it's feasible to support just u2f. I think my ideal solution would only support open standards: u2f, TOTP, and backup codes. It's probably possible to configure django-two-factor-auth or django-otp like this, but I'm not sure their complexity is worth it.

Nobody is is using django-u2f in production as far as I know, so changing stuff shouldn't be a problem, I'm just not sure what direction to go in.

[moreati]

I think my ideal solution would only support open standards: u2f, TOTP, and backup codes.

That's exactly how django-two-factor works, currently sans U2F. Try the demo http://example-two-factor-auth.herokuapp.com/

I'm tidying up a commit to django-two-factor-u2f right now.

[sserrano44]

@moreati what is the status of this issue? need some help?

[gavinwahl]

Moving to #14