Bug 33254 - 2FA - Trust current device
Summary: 2FA - Trust current device
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Staff interface (show other bugs)
Version: Main
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on: 20476
Blocks:
  Show dependency treegraph
 
Reported: 2023-03-16 16:55 UTC by Sam S
Modified: 2024-08-08 01:44 UTC (History)
6 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam S 2023-03-16 16:55:43 UTC
I've been testing the 2FA Koha module, I noticed there's currently no option to "trust current device" something that most MFA modules include, so a user can mark a local device to be excluded from the MFA check for an amount of time (typically a month or so). Not very essential, but would be a nice quality of life feature for users with dedicated machines.
Comment 1 Andrew Auld 2024-08-07 08:58:51 UTC
This is definitely a quality of life feature that our libraries would appreciate. We have had this feedback a few times since MFA implementation has become a requirement in UK public sector systems.
Comment 2 David Cook 2024-08-08 01:44:37 UTC
I reckon this would be easy enough to add. 

This is a good example of where a "borrowers_credentials" table would be great, as we could store a "mfa_token". And then the user could have a cookie with that token.