title: Securing API's with Multi Factor Authentication
body: <p>I want to secure my API with <code>Multi-factor-Authentication</code> on top of <code>Auth Token/JWT</code>. I have been searching but couldn't find any package that can work with <code>drf</code>. I am thinking to write my own django app. Any comments on what should be the architecture ?</p>
  
  <p>One solution that comes to my mind is to introduce the token base architecture.If a user is accessing the mfa secured api then the request instance should be saved alongside a token and a sms should be sent to his mobile (In case of mobile as mfa) and response should be a that token. Then another request should be made to a <code>mfa</code> endpoint with <code>token and mfa-code</code>. Once verified, We would take his previous request object and complete the request.</p>