Page MenuHomePhorge
Create Task
Maniphest T416

Standalone OTP web service
Closed, WontfixPublic
Actions

Description

As suggested in T414, implement a web service providing OTP methods for initialization and validation of one-time-passwords through an API or RPC calls. Besides executing the actual operations using 3rd party libraries for the various OTP methods (e.g. FreeOTP, Yubikey, etc.) this service also stores the necessary information (i.e. secret) associated with user accounts.

The storage of these key-value records shall be abstracted and configurable as well. Backends like MySQL, MongoDB, CouchDB or Redis could be used for storage.

Details

Ticket Type
Task

Related Objects
Search...

Event Timeline

bruederli created this task.May 28 2015, 5:18 PM
bruederli raised the priority of this task from to 60.
bruederli updated the task description. (Show Details)
bruederli added projects: Sprint Server 201522, Architecture & Design.
bruederli changed Ticket Type from Task to Task.
bruederli edited a custom field.
bruederli subscribed.
bruederli removed a project: Sprint Server 201522.May 28 2015, 5:24 PM
grote subscribed.May 28 2015, 11:41 PM
bruederli claimed this task.Jun 8 2015, 8:19 AM
bruederli added a project: Restricted Project.
bruederli edited a custom field.
bruederli edited a custom field.Jun 8 2015, 9:52 AM
bruederli mentioned this in T469: Add proper logging facilities to OTP plugin drivers and storage classes.Jun 11 2015, 4:43 PM
bruederli removed bruederli as the assignee of this task.Jun 12 2015, 2:10 PM
bruederli removed a project: Restricted Project.
vanmeeuwen removed a parent task: T414: OTP authentication for Roundcube.Jun 17 2015, 2:25 PM
vanmeeuwen added a parent task: T32: Two-factor Authentication.
vanmeeuwen removed a project: Architecture & Design.Dec 8 2015, 9:22 AM
vanmeeuwen edited a custom field.
jh23453 subscribed.Oct 30 2016, 7:00 AM

That looks basically like a subset of privacyidea or lintop (and possibly) others.
Do we really want to travel that path?

I got here from T469, after having added and removed lots of tracing
from kolab_2fa. I think we should just add roundcube logging for T469
and ignore this task (or worry about that later).

vanmeeuwen lowered the priority of this task from 60 to Normal.Mar 28 2019, 8:13 AM
machniak closed this task as Wontfix.Nov 13 2019, 10:57 AM
machniak claimed this task.