Security

All api endpoints require authentication. For authentication, Go Money uses a JWT tokens.

JWT cookie is stored in your browser, and you can also receive JWT via login method

2FA

Currently, Go Money itself does not support SSO or 2FA. I strongly suggest using a third-party implementation or services for that.

Cloudflare Zero Trust

Cloudflare Zero Trust is free and easy to set up and configure. You can implement zero-trust authentication for your API/UI and Grafana domains to enhance security.

Persistent JWT tokens

Currently, this feature is not yet implemented, but it will be included in future releases. Ref task https://github.com/ft-t/go-money/issues/30