implement 2-factor for our email-based authentication

[williamstein]

You can get the benefits of 2-factor for SMC by using an outside provider (with 2-factor) and no email auth. However, many people do add email as an auth option for SMC, and we encourage it (given how invite works), so we should also fully support 2-factor natively.

[timothyclemansinsea]

I saw a Facebook AD for https://www.facebook.com/authysec/

…

On Mon, Dec 19, 2016 at 7:53 AM, William Stein ***@***.***> wrote: You can get the benefits of 2-factor for SMC by using an outside provider (with 2-factor) and no email auth. However, many people do add email as an auth option for SMC, and we encourage it (given how invite works), so we should also fully support 2-factor natively. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1401>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AMCG3AbjUoG2_rIYQEnKO8bl_UdOd2zzks5rJqiRgaJpZM4LQ37a> .

[williamstein]

See and update https://github.com/sagemathinc/cocalc/wiki/password when this is changed or closed.

[williamstein]

Use this: https://github.com/speakeasyjs/speakeasy

[williamstein]

These days, this looks really easy to use for us:

https://www.npmjs.com/package/node-2fa