Feature Request: OTP Authentication

[wasantosfi]

Would be very interesting to have OTP Auth option considering:

• via E-Mail (using SMTP server, and easy integration for eg. with Google, Microsoft365, SendGrid, Hostinger, ProtonMail, Fastmail, etc);
• via SMS (using integrations for example with Twilio, TextMagic, Textla, etc.);
  With possibility to set custom the expiration time (eg.: 5min, 15min, 20min, 30min, 1h, etc).

Possibility to serve as MFA resource for E-Mail + Password auth as well.

Note: As a first phase just alphanumeric OTP code is really an attractive resource (mainly when we think on production-ready systems), but later (very low priority for a while, maybe) magic link could be another resource to think as well.

Additionally, thank you very much for the great work!

[ignatz]

Agreed. Second-factor auth has been on my short-list for a while. The only way to get two-factor at the moment is by deferring to a "social" OAuth or external OIDC auth provider.

[wasantosfi]

Yeah, I think having passwordless authentication option (OTP, Magic Link, Auth Apps) an important feature nowadays.