FreeOTP

[jehon]

Hello,

I would like to have a FreeOTP compatible authentication (see here: https://fedorahosted.org/freeotp/)

This authentication is very similar to the cookie authentication, except that the informations are stored in an external (mobile) device:

Step 1 - configuration (once):
The application and the mobile exchange a "secret" (through a QR code)

Step 2 - login:
The mobile generate a pin code (ex: 8 chars) and this pin code is entered aside of the login and password.

This system is also used in google two step authentication.

[mudmin]

That should be doable. I'm writing the new version of UserSpice that will include OAUTH as well, so I can check out doing that as well. I'd also like to support SQRL, too.