Bug 145946 - 2FA does not work with WebDAV shares
Summary: 2FA does not work with WebDAV shares
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: framework (show other bugs)
Version:
(earliest affected)
Inherited From OOo
Hardware: All All
: medium enhancement
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: WebDAV
  Show dependency tree / graph
 
Reported: 2021-11-29 10:28 UTC by Gabor Kelemen (allotropia)
Modified: 2024-12-04 20:36 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Gabor Kelemen (allotropia) 2021-11-29 10:28:47 UTC 
When two factor authentication (TOTP, U2F etc) is enabled on a NextCloud instance and I'd like to set it up via WebDAV in the Remote Files dialog, the authentication fails because asking for the second factor is not supported.

1. Have access to a NexctCloud instance and enable two factor authentication.
2. Try to set it up in the Remote Files dialog.

After entering the user name and password the authentication fails and the dialog does not ask for the second factor.

This did not work with the webdav-neon backend, nor does with the new webdav-curl.
Comment 1 Michael Stahl (allotropia) 2021-11-29 11:51:37 UTC 
i dont think curl supports anything like WebAuthn or TOTP tokens, that's a protocol on top of HTTP that is some effort to implement.

it would be possible to use TLS client-side certificate as 2FA perhaps, but probably few users want that.

so for now with NextCloud it's necessary to set up a Device Password.