Add 2fa to website CMS

di_website/settings/base.py

@@ -97,6 +97,11 @@
     'django.contrib.staticfiles',
     'django.contrib.postgres',
 
+    # Wagtail 2FA (https://github.com/labd/wagtail-2fa)
+    'wagtail_2fa',
+    'django_otp',
+    'django_otp.plugins.otp_totp',
+
 ]
 
 MIDDLEWARE = [
@@ -105,6 +110,8 @@
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
+    # Wagtail 2FA (https://github.com/labd/wagtail-2fa)
+    'wagtail_2fa.middleware.VerifyUserMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
     'django.middleware.security.SecurityMiddleware',
@@ -233,6 +240,10 @@
 
 WAGTAIL_SITE_NAME = "Development Initiatives Website"
 
+# Wagtail 2FA settings (https://github.com/labd/wagtail-2fa)
+WAGTAIL_2FA_REQUIRED = True
+WAGTAIL_2FA_OTP_TOTP_NAME = "DI Website CMS"
+
 # Base URL to use when referring to full URLs within the Wagtail admin backend -
 # e.g. in notification emails. Don't include '/admin' or a trailing slash
 WAGTAILADMIN_BASE_URL = os.getenv('BASE_URL') or 'http://devinit.org'

requirements.txt

@@ -28,3 +28,4 @@ wagtail-metadata>=4.0.2,<4.1.0
 whitenoise==5.2.0
 wagtailmedia>=0.13.0,<1.0.0
 PyGithub==1.54.1
+wagtail-2fa==1.6.9