Require Authy

[twilio]

Require Authy

[Gasparila]

At Flexport, we did this by adding the following code to our application controller:

before_filter :require_two_factor!

def require_two_factor!
    allowed_urls = ['/users/enable-two-factor']

    if !current_user.ignore_authy_until.nil? && current_user.ignore_authy_until >= Time.now
      return # Admin reset in progress
    end

    if !allowed_urls.include?(request.fullpath)
      if !current_user.authy_enabled
        redirect_to user_enable_authy_path
      end
    end
  end