如何在Django中实现两步验证（2FA）

pip install django-two-factor-auth

INSTALLED_APPS = [
    # ...
    'django_otp',
    'django_otp.plugins.otp_totp',
    'two_factor',
]

MIDDLEWARE = [
    # ...
    'two_factor.middleware.threadlocals.ThreadLocals',
    'two_factor.middleware.csrf.CookieXsrfTokenMiddleware',
    'two_factor.middleware.authy.AdminRequiredMiddleware',
    'two_factor.middleware.phone_required.PhoneRequiredMiddleware',
]

LOGIN_URL = 'two_factor:login'
LOGIN_REDIRECT_URL = 'two_factor:profile'
LOGIN_EXEMPT_URLS = (
    r'^accounts/login/$',
    r'^accounts/logout/$',
    r'^accounts/signup/$',
    r'^accounts/password/change/$',
    r'^accounts/password/reset/$',
    r'^accounts/confirm-email/$',
)

AUTHENTICATION_BACKENDS = [
    'django.contrib.auth.backends.ModelBackend',
    'two_factor.auth_backends.OTPAuthenticationBackend',
]

TWO_FACTOR_SMS_GATEWAY = 'two_factor.gateways.twilio.gateway.TwilioGateway'
TWO_FACTOR_PHONE_MODEL = 'two_factor.phonemodels.Phone'
TWO_FACTOR_PATCH_ADMIN = True

# 调整消息框的位置
from django.contrib.messages import constants as messages
MESSAGE_TAGS = {
    messages.ERROR: 'danger',
}

python manage.py makemigrations
python manage.py migrate

python manage.py createsuperuser

{% extends 'two_factor/base.html' %}

{% block title %}Profile{% endblock %}

{% block content %}
{% if profile.nogadget_warning %}
    <div class="alert alert-warning">
        {% trans "You have not configured any Devices for use with Two-Factor Authentication." %}
        <a href="{% url 'two_factor:setup' %}">{% trans "Setup Two-Factor Authentication" %}</a>
    </div>
{% endif %}
{% if profile.gadget_warning %}
    <div class="alert alert-warning">
        {% trans "You need to configure more Devices for use with Two-Factor Authentication." %}
        <a href="{% url 'two_factor:setup' %}">{% trans "Setup Two-Factor Authentication" %}</a>
    </div>
{% endif %}

{% if profile.totp_set %}
    <div class="card-body">
        <h4 class="card-title">{% trans "Google Authenticator" %}</h4>
        <p class="card-text">{% trans "Scan the QR code below with Google Authenticator to set up Two-Factor Authentication." %}</p>
        <img src="{{ profile.qrcode }}" alt="qrcode">
        <p class="card-text">{% trans "If you are unable to scan the QR code, copy and paste the code below into Google Authenticator." %}</p>
        <pre>{{ profile.totp }}</pre>
    </div>
{% endif %}
{% endblock %}