Two Factor By ReFlar
This replaces issyrocks12/flarum-ext-twofactor
Importing from the old twofactor
- Simply install this, everything will be transfered to the new extension automatically
Please read the install guide!
A Flarum extension that increases security by adding TOTP (Google Authenticator) and Twillio two factor authentication
Usage
- As a user, go to your account settings page and follow the prompts to setup twofactor
- Admins have the option to link their Twillio account to allow users to recieve codes via text
Installation
This extension requires a bit more setup. These steps are optional but will greatly increase the security of this plugin.
First install it with composer:
composer require reflar/twofactor
Then login and enable the extension.
EXTREMELY IMPORTANT:
If you have Apache, add these lines right after the "RewriteEngine on"
RewriteCond %{REQUEST_URI} ^/login
RewriteRule ^(.*)$ - [F,L]
If you have Nginx add these lines to your server block:
location ~ ^/login {
deny all;
}
!!Make sure to undo this if you ever uninstall this extension!!
Q: What does this do?
A: This extension uses a custom login handler and therefore a different url to send the login request to. If someone changes the url back to the default they could bypass the two factor auth.
To Do
Issues
Links
Any fool can write code that a computer can understand. Good programmers write code that humans can understand.