[GUACAMOLE-1219] Allow TOTP to be disabled by group membership

• Type: New Feature
• Status: Closed
• Priority: Minor
• Resolution: Implemented
• Fix Version/s: 1.6.0
• Component/s: Documentation, guacamole-auth-totp
• Labels: patch totp
• Flags: Patch
• Assignee: Nick Couchman
• Reporter: Jan-Philipp Hülshoff
• Created: 21/Nov/20 11:08
• Updated: 12/Apr/23 12:44
• Resolved: 12/Apr/23 12:44

Description

The TOTP Authenticator Plugin currently does not allow configuration.

The patch which is included in this ticket adds the following functionality:

1. Introduces a new configuration option:
   totp-disabled-group
   Members of the given group will have TOTP disabled. If the configuration is left blank, TOTP usage is enforced.
2. Adds the functionality in the code

 

Review & Feedback is appreciated. Especially the correct usage of the API for retrieving group membership.

 

Issue Links

• is duplicated by: GUACAMOLE-1164 Disable TOTP for specific users (Example: If the user is authenticated via DUO)