|
|
|
|
|
by viro
1382 days ago
|
|
Idk why you think you should be able to login to a cloud SaaS product while its down. From your comment here I highly highly doubt you were at all even remotely civil in that forum post $12 a month doesn't mean you get to be an asshole to people. Not all forms of Auth can be done locally, for example most 2fa requires server access. |
|
Anyway, I'll still respond.
>Idk why you think you should be able to login to a cloud SaaS product while its down
The application works without internet access.
> Not all forms of Auth can be done locally, for example most 2fa requires server access.
TOTP validation can be done at the offline level. And the hardest proof of it is that the tokens themselves are generated offline. All that is required at the server side is shared secret and a Unix time syscall. This gets done at the browser extension level[0], no network required.
[0] https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...