[RFC]: Implement MFA

[arhimede]

RFC

Q	A
Proposed Version(s)	7.1.0
BC Break?	Yes

Goal

Implement MFA for admins
based on routes

1. MFA for main login, which can be turned on or off at system level
2. MFA again to certain rutes

Background

Security:
as MFA can be in this case

• apps like google authenticator, microsoft authenticator
• SMS ? maybe
• passkey ?

[arhimede]

https://github.com/hosseinhezami/totp-authenticator/blob/master/src/Authenticator.php

https://medium.com/@Edgaras0x4E/implementing-totp-based-multi-factor-authentication-in-symfony-7-e186df051dc8

[arhimede]

https://datatracker.ietf.org/doc/html/rfc6238

[arhimede]

system wide:

admin enforced, optional
user enforced, optional

individual IF system wide = optional

admin: optional
user: optional

[arhimede]

add this link to documentation , and readme.md
https://datatracker.ietf.org/doc/html/rfc6238