XF 2.2 Authy API Onetouch -> Verify?

[Russ]

Just got this email:

Effective March 1, 2023, the Authy API Onetouch (Push) and Authy Softoken (TOTP) products will only be available to current users. 

 
New Twilio customers and those without previous access to Authy Onetouch (Push) and Authy Softoken (TOTP) won’t be able to purchase these products through Twilio’s Console or access developer documentation. Twilio is continuing to invest in the Verify API for the same business use cases.

Just curious if XF had plans to offer the new Verify option? I understand I can still use the old setup for now since I'm an existing user.

 

[RobinHood]

Is that related to the push notification 2FA to log in? If so, that sucks. I love that feature

 

[Chris D]

Yeah and unfortunately the replacement - the Verify API - is not really fit for purpose.

You could use it to build something similar to Authy OneTouch but you need to build your own destination for the notifications to be received. They can no longer be sent to the Authy app. So we'd need a whole new thing. Maybe even our own native app to receive the push notifications and have a system to process and approve the login. Theoretically it could maybe do it via web push, but at this point it's way too much work and, honestly, not that many people ever used it. Present company excepted, of course.

So all we can say is enjoy it while you can, but absolutely follow the advice we now show on login and various places and set up an alternative.

 

[Russ]

I just disabled mine. It might be an oversight but I feel like users shouldn't be able to have the option to enable it again (I can enable it still).

 

[Sysnative]

Kinda a pain if it stops working - although I can switch to a normal code on the app. Shame they're killing it.

Considering you now have Passkey support - is adding 2FA via FIDO2 an option for a non-passkey alternative?