I’m hoping to end up with a pretty modern full-featured authentication solution with options like 2FA, magic links (passwordless login) and new-IP detection (triggering 2FA or e-mail reauthentication for logins on new devices). New-IP detection and 2FA feel like necessary components of a secure app these days.
From what I can tell, dbAuth supports username+password authentication and webAuthn, but that’s pretty much it. I understand that I can get a full-featured solution by adding Auth0 or some OAuth2 providers, but I’d like to explore the local solution first if possible.
Does anyone have recipes or plugins that they’d recommend for these features?