Skip to content

Add MFA with Django-AllAuth - #48

Open
rechner wants to merge 11 commits into
devfrom
rechner/django-allauth-2fa
Open

Add MFA with Django-AllAuth#48
rechner wants to merge 11 commits into
devfrom
rechner/django-allauth-2fa

Conversation

@rechner

@rechner rechner commented Sep 20, 2026

Copy link
Copy Markdown
Member

Closes #45.

Uses Django-allauth to add MFA via TOTP, Passkey, and backup codes.

  • Add MFA policy enforcement for admin users with config toggle
  • Integrate django-allauth for headless authentication with JWT tokens
  • Create MFA setup allowed paths for first enrollment
  • Update frontend authentication flow with MFA-aware login component
  • Enable passkey-based login with MFA as optional verification layer

Also accepts legacy session JWTs to minimize deployment disruption.

@rechner
feat(auth): Add MFA with Django-Allauth
991094d 
- Add MFA policy enforcement for admin users with config toggle
- Integrate django-allauth for headless authentication with JWT tokens
- TOTP, WebAuthn, and recovery code MFA methods
- Create MFA setup allowed paths for first enrollment
- Update frontend authentication flow with MFA-aware login component
- Enable passkey-based login with MFA as optional verification layer
@rechner
Add allauth API route to container nginx configuration
346f948
@github-actions

github-actions Bot commented Sep 20, 2026

Copy link
Copy Markdown

Created image with name ghcr.io/pawprintprototyping/membermatters:untrusted-pr-image-PawprintPrototyping-rechner-django-allauth-2fa. WARNING: run this image at your own risk - it was created from a potentially untrusted PR.

@rechner
feat(auth): Enforce MFA for Discourse SSO login attempts
42b5e50 
- Prevent admin users from bypassing MFA through legacy login endpoint during SSO handoff
@github-actions

github-actions Bot commented Sep 20, 2026

Copy link
Copy Markdown

Created image with name ghcr.io/pawprintprototyping/membermatters:untrusted-pr-image-PawprintPrototyping-rechner-django-allauth-2fa. WARNING: run this image at your own risk - it was created from a potentially untrusted PR.

@github-actions

github-actions Bot commented Sep 20, 2026

Copy link
Copy Markdown

Created image with name ghcr.io/pawprintprototyping/membermatters:untrusted-pr-image-PawprintPrototyping-rechner-django-allauth-2fa. WARNING: run this image at your own risk - it was created from a potentially untrusted PR.

@rechner
tests(auth): Additoinal test coverage
f044c49 
- Fix `_session_for_token()` to support both raw session token and encrypted AllAuth JWT claim
@github-actions

github-actions Bot commented Sep 20, 2026

Copy link
Copy Markdown

Created image with name ghcr.io/pawprintprototyping/membermatters:untrusted-pr-image-PawprintPrototyping-rechner-django-allauth-2fa. WARNING: run this image at your own risk - it was created from a potentially untrusted PR.

@github-actions

github-actions Bot commented Sep 21, 2026

Copy link
Copy Markdown

Created image with name ghcr.io/pawprintprototyping/membermatters:untrusted-pr-image-PawprintPrototyping-rechner-django-allauth-2fa. WARNING: run this image at your own risk - it was created from a potentially untrusted PR.

@github-actions

github-actions Bot commented Sep 23, 2026

Copy link
Copy Markdown

Created image with name ghcr.io/pawprintprototyping/membermatters:untrusted-pr-image-PawprintPrototyping-rechner-django-allauth-2fa. WARNING: run this image at your own risk - it was created from a potentially untrusted PR.

@sonarqubecloud

sonarqubecloud Bot commented Sep 25, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
19 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@github-actions

github-actions Bot commented Sep 25, 2026

Copy link
Copy Markdown

Created image with name ghcr.io/pawprintprototyping/membermatters:untrusted-pr-image-PawprintPrototyping-rechner-django-allauth-2fa. WARNING: run this image at your own risk - it was created from a potentially untrusted PR.

@rechner rechner added the enhancement New feature or request label Sep 25, 2026
@taylordotfish taylordotfish self-assigned this Sep 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@taylordotfish taylordotfish Awaiting requested review from taylordotfish

Assignees

@taylordotfish taylordotfish

Labels

enhancement New feature or request

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Add 2FA and Passkey support

2 participants

@rechner @taylordotfish