Add support for TOTP and WebAuthn 2FA

[john-light]

What's your feature/idea?

Currently, GitBook does not have any options for two-factor authentication (2FA). This is an important security improvement that will help protect user accounts and documentation hosted on GitBook from compromise. In particular, time-based one-time password (TOTP) and WebAuthn 2FA are the most secure and widely-deployed 2FA options that I would like to see supported on GitBook.

Alternatives considered:

• SMS 2FA, but this has been proven to be relatively insecure, to the point that NIST now recommends against using it.

What's your desired outcome?

Users can add TOTP or WebAuthn 2FA to their GitBook account.

What's the impact of this for you?

• Critical
• High
• Medium
• Low

Anything else?

No response