goauthentik / goauthentik/authentik

Generate new static otp's after all have been used

Open
#23,496 0 comments 0 reactions 0 assignees View on GitHub
enhancement enhancement/confirmed
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 2h
Merged PRs (30d)
659

Description

### Is your feature request related to a problem?

Currently, if a user uses all 6 generated static otp's, they have to manually generate 6 new ones by going to

settings -> credentials -> mfa devices -> delete the old static device -> add a new static device

### Describe the solution you'd like

We should automatically generate 6 new codes when the old ones have been used and display them to the user

### Describe alternatives that you've considered

Manually handling the process, it is just somewhat burdensome and a "gotcha"

### Additional context

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by tracing the MFA devices flow at settings → credentials → MFA devices, then locate where static OTPs are generated, consumed, and displayed. The work is done when exhausting all six codes automatically produces and displays six replacement codes, with the relevant flow covered by tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.