On Thu, Sep 05, 2013 at 08:57:33PM +0200, Till Maas wrote:
On Thu, Sep 05, 2013 at 12:01:35PM -0500, Ian Weller wrote:
> This is the same for a form that asks for password + token code, but a
> simple password + token code field raises too many questions for someone
> who is logging in to an application and has no idea what a token code
> is.
IMHO it would be nice if the password field can be used to enter both
password and token code at once to make login less annoying for 2fa
users and therefore more likely that it is used.
At least on the backend that will need to be supported. There are cases
where we'll want to run applications that we don't write ourselves that only
have a single field for password. For those situations, the backend will
have to be able to handle parsing a single password field for a combined
password+2fa.
I don't know if that needs to be expressed on the frontend but if it's
useful we might as well.
-Toshio