[RFC]: Implement MFA

[arhimede]

RFC

Q	A
Proposed Version(s)	7.1.0
BC Break?	Yes

Goal

Implement MFA for admins
based on routes

1. MFA for main login, which can be turned on or off at system level
2. MFA again to certain rutes

Background

Security:
as MFA can be in this case

• apps like google authenticator, microsoft authenticator
• SMS ? maybe
• passkey ?

[arhimede]

https://github.com/hosseinhezami/totp-authenticator/blob/master/src/Authenticator.php

https://medium.com/@Edgaras0x4E/implementing-totp-based-multi-factor-authentication-in-symfony-7-e186df051dc8

[arhimede]

https://datatracker.ietf.org/doc/html/rfc6238