teleport/lib/config
Andrew Lytvynov 5739b63e51
mfa: add new second_factor options "on" and "optional" (#5508)
* mfa: add new second_factor options "on" and "optional"

"on" means that 2FA is required for all users, either TOTP or U2F.

"optional" means that 2FA is supported for all users, but not required.
Only users with MFA devices registered will be prompted for 2FA on
login.

The login with both supported methods is using the same API as the U2F
login. It just now supports TOTP in addition. The API endpoints are
still named after "u2f", I'll rename those in a future PR (in a
backwards-compatible way).

* Apply suggestions from code review

Co-authored-by: Gus Luxton <gus@gravitational.com>
Co-authored-by: a-palchikov <deemok@gmail.com>

* Address reivew feedback

Co-authored-by: Gus Luxton <gus@gravitational.com>
Co-authored-by: a-palchikov <deemok@gmail.com>
2021-02-16 16:24:23 -08:00
..
configuration.go Add TELEPORT_CONFIG_FILE to disable reading Teleport config from disk (#5483) 2021-02-16 15:24:08 -04:00
configuration_test.go Database access (#5005) 2021-01-14 18:21:38 -08:00
fileconf.go mfa: add new second_factor options "on" and "optional" (#5508) 2021-02-16 16:24:23 -08:00
fileconf_test.go Remove 'var _ = fmt.Printf' from *_test.go files (#5438) 2021-01-29 17:01:10 -08:00
testdata_test.go Added Application Access. 2020-11-03 14:32:13 -08:00