pve-access-control/PVE
Wolfgang Bumiller f25628d3ef verify_ticket: allow general non-challenge tfa to be run as two step call
This allows for doing OTP TFA in two steps, first login with normal
credentials and get the half-logged-in ticket, then send the OTP
verification for full login, same as with u2f was already possible.

This allows for a nicer UI, as OTP fields can be shown on demand, and
do not need to be visible by default.

The old way of sending the OTP code immediately with the initial
credentials request still works for backward compatibility and as
some API user may prefer it.

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-04-08 14:48:13 +02:00
..
API2 verify_ticket: allow general non-challenge tfa to be run as two step call 2019-04-08 14:48:13 +02:00
Auth use a property string for tfa config 2019-04-03 08:04:00 +02:00
CLI replace read_password with param_mapping 2018-06-27 13:27:22 +02:00
AccessControl.pm verify_ticket: allow general non-challenge tfa to be run as two step call 2019-04-08 14:48:13 +02:00
Makefile convert pveum into a PVE::CLI class 2015-10-01 16:49:37 +02:00
RPCEnvironment.pm check_api2_permissions: avoid warning about uninitialized value 2017-03-31 17:05:52 +02:00