TwoFactorAuth

Two-factor authentication with TOTP, WebAuthn or a custom external mechanism.

📄️Generate a TOTP seed

Generates TOTP seed and QR code for 2FA. User needs to verify the seed value using 2fa/totp/enable endpoint

Enables TOTP for a user by verifying the seed value generated from 2fa/totp/setup

Disables TOTP for a user. Does not affect other 2FA mechanisms a user might have set up

Checks if a TOTP token provided by a User is valid for authentication

Disables all 2FA mechanisms a user might have set up

Enables custom 2FA, which disables the account password for IMAP, POP3 and SMTP.

Disables custom 2FA. If it was the only 2FA method, the account password works for IMAP, POP3 and SMTP again.

Lists the WebAuthn credentials registered for a user.

Deletes a WebAuthn credential of a user.

Starts the registration of a WebAuthn authenticator and returns the registration challenge.

Attestation is used to verify the authenticity of the authenticator and provide assurances about its features.

Starts a WebAuthn authentication and returns the PublicKeyCredentialRequestOptions object for the client.

Verifies the WebAuthn authentication assertion and authenticates the user.