Twofactor by Reflar

RelatedTitle

Seems pretty cool however a google authenticator integration would be nice I also think an option to receive a pin in email would work too

Kyrne

RelatedTitle It already has Google authenticator (TOTP)!

I personally feel like emailed verification codes defeat the purpose of two factor as someone resetting your password via email can then get your 2f code.

UaMV

Kyrne I just implemented on two forums. Up and running smoothly … thank you for this! ??

Kyrne

0.1.0-beta.2

It looks like one commit didn't get pushed to the repo for some reason, it was supposed to be included in the original version ?

Added a notification email for when a user enables 2fa (Supports Pretty-Mail ?)

XxPoNaGeXx

Whenever I scan a barcode in google auth app it says invalid barcode

Kyrne

XxPoNaGeXx try typing in the code manually, does it work

Edit: if you could provide me with your forum link I can do a quick test to see what is wrong.

XxPoNaGeXx

Kyrne Yes, this worked however barcode scanning isn't

Kyrne

XxPoNaGeXx see my edit

XxPoNaGeXx

Kyrne https://lgbtyouth.ga/

Kyrne

XxPoNaGeXx Hmm, I wasn't able to reproduce on your website. It scanned the bar code just fine, and I successfully enabled twofactor. Could you send me a screenshot of your twofactor barcode? (please regenerate your code after you send it to me for security reasons)

XxPoNaGeXx

Kyrne code removed

Kyrne

XxPoNaGeXx Hmm, even that one scanned fine into my phone. I don't think it is the extension's problem. Could be related to the app. (I'm using the official google authenticator app). Are you using iOS or Android?

XxPoNaGeXx

Kyrne I am using that app also ? on IOS

Kyrne

XxPoNaGeXx

0.1.0-beta.3

Fix iOS incompatibility

It is now very important you use https in tandem with this extension.

(Which you should be doing anyway because you are handling people's data)

XxPoNaGeXx

Kyrne how do I update?

Kyrne

XxPoNaGeXx run composer update reflar/twofactor in your Flarum root dir. If you have Bazaar give it 60 minutes to pull the update, then it should prompt you.

Kryonoglou

Can you make extension for phone verification on the register form?
I think this is very good idea.
Think about it. ?

tankerkiller125

Any option for U2F using the WebAuthn API in the future for those of us with U2F keys?

Kyrne

0.1.0-beta.4

Beta 8 Compatibility
Added UserEnabledTwoFactor event

Updating ⬆️

Make sure you are running Flarum beta 8, this update will not work on any other version
Run the follow commands (in this order) in your Flarum root directory:
- composer update reflar/twofactor
- php flarum migrate
- php flarum cache:clear

peopleinside

@Kyrne I made a question in another topic but you can reply here.

Will be nice be able to choose to receive two factor code by email without need an app and also maybe add as alternative method email in case the code in the app was loosed like when Google Authenticator are inaccessible or uninstalled without before remove the 2 factor.

Thanks for this extension.