Integrating 2 factor authentication into your project
summary
Explains how to add real TOTP authentication to Django: use TOTP via django-otp for crypto, store per-user key, last-used counter and interval, validate tokens in a form and protect views with a decorator or mixin; implements admin UX with QR code setup and backup codes so users can recover, adds middleware to cache “is verified” state, and warns against SMS per NIST. Provides working django-two-factor-auth integration layered on django-otp, with admin setup that actually functions.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:47History of authentication
- 4:42Understanding 2FA
- 7:24Authentication algorithms
- 11:34Implementing in Django
- 16:54Django libraries
- 21:22Security recommendations
- 24:08Q&A and conclusion
related talks
26mOAuth2 and Django, What You Should Know
30mDeploying Two-Factor Authentication to Millions of Users
33mLightning Talks I
39m2FA, WTF?
37mDjango + Keycloak: trust authentication to the professionals
58mTaking the pain out of passwords and authentication
26mDeveloping a Single Sign On Service using Django
35mExternal authentication for Django projects