2FA Setup Page

[emilkovacev]

On the test branch, there is a variable called SECURE that stores whether or not to secure the website with 2fa (bool). Implement the 2FA setup page that lies between /signup and /login

Steps

• If SECURE, then redirect /signup to a 2fa setup page
• Generate a secret key from which to
• Generate a qr-code that displays the secret key, and user information
• Have the user validate that the code works (form field that expects the code, verify that the code is correct)
• Clicking enter takes you to /login

Resources

• https://pypi.org/project/qrcode/
• https://security.stackexchange.com/questions/205845/two-factor-authentication-secret-storage