Support 2 step authentication

[koke]

We support 2 step authentication via app specific passwords, but unless the user knows that, the process is very confusing.

Login to WordPress.com using regular password:

If you login to a self-hosted, the Jetpack screen accepts the master password initially, but then stats don't work and further Jetpack screens won't accept the password:

[pivotal-rebecca]

It seems like the REST API does not give a sensible error message on a wrong password if two-factor is turned on. @beaucollins is looking at the REST API now.

[ranh]

"We support 2 step authentication via app specific passwords" is a bit of a stretch? There are two separate issues here I think:

• Users with two-factor enabled don't get good feedback when trying to log in using their regular password.
• An application password is required to log in to the WordPress app when two-factor is enabled.

Similar apps such as Gmail and Facebook on the iPhone and Android let you enter your regular password and then the confirmation code, and do not require an application password.

[beaucollins]

@ranh better support for 2-step requires engineering efforts on WordPress.com which is in the initial stages of planning. Nothing we can do on the client at the moment.

[sendhil]

Punting to 3.9.1.

[sendhil]

Moving to 4.0.

[koke]

I pushed what I have so far to https://github.com/wordpress-mobile/WordPress-iOS/tree/issue/269-two-step-auth-ui

It's mostly working, but there some errors related to #1220 that prevent a proper login.
That branch should be considered temporary, as I'll rebase those changes once #1220 is fixed

[sendhil]

@koke - any update on this?

[koke]

It's blocked by #1220, which needs some backend changes

[sendhil]

Moving to 4.0.1.