noxtal / my-2fa

A simple 2FA Backend API entirely in Go as a way to learn the language.

my-2fa

A simple 2FA Backend API entirely in Go as a way to learn the language. Cryptographically secure using crypto/rand according to a gosec scan. Manages a database internally to handle multiple users and codes. The system achieves ambiguity using only a single HTTP status code if ever either of the password or code is incorrect. To enhance security, the database wipes every minute. This project still should not be used in production as it is only a quick learning project.

Usage

GET

Get with query user and password to get a new random code for the user specified using the corresponding password.

• 200: A code was generated and sent to the user.
• 500: One of the parameters was missing.

POST

Post with query user, password and code to validate a code for the user specified using the corresponding password.

• 200: Access Granted.
• 401: Access Denied.
• 500: One of the parameters was missing.

TODO

• Lay out the backend
• Use a password to validate identity
• Wiping every minute
• Frontend