It would be great to see FIFO2 certified Webauthn/CTAP integration into unRAID's authentication system. This would also make additional security protections convenient for users who wish to use it. Examples could be re-authenticating for unRAID server restart/shutdown, array stopping, docker installations, etc. I know it's not widely implemented yet, not as much as it should be, but security keys are slowly becoming more widely adopted, especially for some of us who do IT/infosec professionally. Plus, Google has integrated Titan key into the Pixel 6 series (I thought they had back with the 3 series but what do I know), so for people like me, a separate key isn't even needed (though I have 2). Biometric verification makes it nice too.

 

Anyway, I know the API isn't the friendliest, but it would be a nice thing to have.

 

 

 

Michael

I am shocked that this has had absolutely zero traction in over 2 years, as security becomes more and more relevant and accessible. Huge +1, would be great to see this. 

For OP and others, I definitely recommend self hosting something like authentik or keycloak and putting unraid behind that if you are able to, and achieve similar security to the proposed support.

Edited November 2, 20241 yr by wowsuchricky
adding more context