How would you go about layered authentication?
I have an upcomming project where it might be useful to have layered authentication.
As an example: If you login to my app, you would do so using a magic link. This is enough to use the app and so on.
But if you want to access your invoices or other financial data, you would need to authenticate using your secound factor (for example sms otc).
How would you go about something like this? Is there an authentication solution provider who supports use cases like this?
Thanks a lot!
Nico
1 Reply
if you're looking to not roll your own auth using something like Auth.js/Next.Auth, then I would recommend Clerk, which supports both magic links and multi-factor auth https://clerk.com/docs/custom-flows/magic-links https://clerk.com/docs/custom-flows/mfa
Multi-factor | Clerk
Learn how to require a second step during authentication.