Is your feature request related to a problem? Please describe.
When using LDAP, it's likely that we won't know the user's password, so obtaining it, generating a hash and then using that to generate the TOTP token isn't possible.
Describe the solution you'd like.
This is tough because it's not clear whose problem this is. We could say that LLDAP should generate TOTP tokens during user creation, and authentication apps could then use it. On the other hand, LDAP is a directory, not an authentication service. Although, it's not uncommon for an LDAP directory to also contain things like separate SAMBA credentials and VLAN identifiers...
In any case, since Tiny is doing the auth, perhaps it could have a user-facing way of onboarding an authenticated user (by password) for the purpose of generating Tiny's TOTP, displaying the QR code in the login UI instead of the CLI.
I know, it's making Tinyauth not so tiny, but 2fa via TOTP is pretty important since passkeys are still a ways off from being universal, friendly and functional.
Describe alternatives you've considered.
No response
Additional context
No response
Human Written Confirmation
Is your feature request related to a problem? Please describe.
When using LDAP, it's likely that we won't know the user's password, so obtaining it, generating a hash and then using that to generate the TOTP token isn't possible.
Describe the solution you'd like.
This is tough because it's not clear whose problem this is. We could say that LLDAP should generate TOTP tokens during user creation, and authentication apps could then use it. On the other hand, LDAP is a directory, not an authentication service. Although, it's not uncommon for an LDAP directory to also contain things like separate SAMBA credentials and VLAN identifiers...
In any case, since Tiny is doing the auth, perhaps it could have a user-facing way of onboarding an authenticated user (by password) for the purpose of generating Tiny's TOTP, displaying the QR code in the login UI instead of the CLI.
I know, it's making Tinyauth not so tiny, but 2fa via TOTP is pretty important since passkeys are still a ways off from being universal, friendly and functional.
Describe alternatives you've considered.
No response
Additional context
No response
Human Written Confirmation