v3.0
This is a major cleanup and CSS adjustments so please test before deployment.
- Updated to fido2==1.1.3
- Removed: CBOR and exchange is done in JSON now.
- Removed:
simplejson
package from dependencies. - Email OTP is always 6 numbers.
- Better support for bootstrap 4 and 5.
- Added: the following settings
MFA_FIDO2_RESIDENT_KEY
: Defaults toDiscouraged
which was the old behaviourMFA_FIDO2_AUTHENTICATOR_ATTACHMENT
: If you like to have a PLATFORM Authenticator, Defaults to NONEMFA_FIDO2_USER_VERIFICATION
: If you need User VerificationMFA_FIDO2_ATTESTATION_PREFERENCE
: If you like to have an AttentionMFA_ENFORCE_EMAIL_TOKEN
: if you want the user to receive OTP by email without enrolling, if this the case, the system admins shall make sure that emails are valid.MFA_SHOW_OTP_IN_EMAIL_SUBJECT
: If you like to show the OTP in the email subjectMFA_OTP_EMAIL_SUBJECT
: The subject of the email after the token allows placeholder '%s' for otp