Details

    • Type: New Feature New Feature
    • Status: Resolved Resolved
    • Priority: Minor Minor
    • Resolution: Obsolete
    • Affects Version/s: Far Future
    • Fix Version/s: None
    • Component/s: OIOIOI
    • Labels:
      None

      Description

      Add 2 factor authentication to OIOIOI - use time based tokens. Later, we can also add U2F.

      Moreover, add a new setting "enforce 2fa for superadmins" to settings.py (maybe add setting for contest admins privileges and also specific option in contest settings, too). With this option enabled, superadmins have full access if and only if they have enabled 2FA. Otherwise they have privileges of regular users.

      I plan to work on this when I'll get some free time. If it isn't ready before March 2018, you can just ignore this sentence or ping me :)

        Activity

        Artur Jamro made changes -
        Field Original Value New Value
        Assignee Artur Jamro [ mrowqa ]
        Artur Jamro made changes -
        Description Add 2 factor authentication to OIOIOI - use time based tokens. Later, we can also add U2F.

        Moreover, add a new setting "enforce 2fa for superadmins" to settings.py (maybe add setting for contest admins privileges and also specific option in contest settings, too). With this option enabled, superadmins have full access if and only if they have enabled 2FA. Otherwise they have privileges of regular users. Consider also the following option - expiring sessions after closing browser.

        I plan to work on this when I'll get some free time. If it isn't ready before March 2018, you can just ignore this sentence or ping me :)
        Add 2 factor authentication to OIOIOI - use time based tokens. Later, we can also add U2F.

        Moreover, add a new setting "enforce 2fa for superadmins" to settings.py (maybe add setting for contest admins privileges and also specific option in contest settings, too). With this option enabled, superadmins have full access if and only if they have enabled 2FA. Otherwise they have privileges of regular users.

        I plan to work on this when I'll get some free time. If it isn't ready before March 2018, you can just ignore this sentence or ping me :)
        Szymon Acedański made changes -
        Status New [ 10000 ] Resolved [ 5 ]
        Assignee Artur Jamro [ mrowqa ] Szymon Acedański [ accek ]
        Resolution Obsolete [ 7 ]

          People

          • Assignee:
            Szymon Acedański
            Reporter:
            Artur Jamro
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: