Currently we have support for Password Based Login in Spring Security. But I can't find any support for Login With OTP or any description on same in Reference Documentation. Now a days its very common for any application to provide Login with OTP to deal with problem of User forgetting password. In order to deal with problem of user forgetting password we have other solutions like login with oauth, openid, qrcode based login but still Login with OTP is very widely used. The whole point of raising this ticket is to have healthy discussion on same and come up with best way to implement same in form of either adding support in Spring Security, or having a description in Reference Documentation to implement same or adding a sample application for same in Spring Security Sample Examples. In either form it will be beneficial for large community of Spring Security.

Comment From: rwinch

Thanks for the report @ankurpathak I believe this might be a duplicate of gh-5238 Can you confirm or explain why not?

Comment From: ankurpathak

@rwinch I haven't heart much about WebAuthn. But going through your link and having brief read I can make its something related to login. So it might be a subissue of that broder issue. So I leave it to you decide on this issue.

Comment From: rwinch

Ok. I do agree this is a larger issue than just gh-5238. While I think the linked issue will put everything in place for this issue, let's leave this open for now

Comment From: osiegmar

This issue seem to duplicate #2603