Is there anything that does two-factor or multi-factor authentication for Meteor?

help
1

I’ve found one article laying out how to do two-factor authentication in Meteor with Twilio SMS. I like this as a solution, but I can’t get over the fact that I’d be writing my own security for two-factor authentication. Anyone know of an existing package?

1 Like
2

That article is here:

https://ravis.me/2014/12/02/meteor-js-two-factor-authentication/

It hasn’t seen any traction on Reddit or Crater, unfortunately, and there’s still no package for 2FA on Atmosphere.

@awatson1978, did you run into this issue as well while working on HIPAA-compliant apps?

2 Likes
3

Not I. HIPAA has a lot of overlap with security, but when it gets to advanced topics, tends towards business solutions rather than technical solutions. After basic encryption is implemented, HIPAA security looks at implementing good business practices with policies and procedures, rather than implementing advanced encryption schemes like 2 factor auth.

That being said, the HL7 Argonaut FHIR project is in the process of implementing an OAuth2 server. It’s sort of like a 2 factor auth, and I’ve heard of people kludging it to do 2 factor.

If OAuth will suffice, I can provide leads on that; but that’s about exhausts my knowledge of security (and this HL7/OAuth package itself is definitely pushing the boundaries of my security knowledge. Any help would be much appreciated.)

4

Hi,

Have you made any advance on the OAuth2 server? We will be working on creating such a package for Rocket.Chat next week.

Should we join forces?

Best,

Gab

5

Have you implemented this in Rocket.Chat?

6

Hi guys, we started the work and managed to get it working on Rocket.Chat

Please see https://github.com/RocketChat/rocketchat-oauth2-server