Are you already working with the → admin_audit log ← ?
It logs AppManagement-, Auth-, Console-, Files-, GroupManagement-, Security-, Sharing-, Trashbin-, UserManagement- and Versions-events in json format, so → easy to filter and reuse in scripts ← .
→ this ← is about logrotation if you want to make your logfiles GDPR compliant.
You need
| App-Id | twofactor_webauthn |
| App-Name | Two-Factor WebAuthn |
| Summary | WebAuthn two-factor provider |
| Categories | security |
| Repository | GitHub - nextcloud/twofactor_webauthn: WebAuthn Two-Factor Provider for Nextcloud |
| php-Extensions | gmp |
| NC min/max | 26 / 29 |
| Not-shipped (not included) App available in appstore | |
| Appstore | https://apps.nextcloud.com/apps/twofactor_webauthn |
That App implements the FIDO2 Standard witth all its benefits (Windows Hello, Apple Face ID etc), not only as second factor but as main login (first factor) as well.
Viel Glück,
ernolf