2FA - Two Factor Authentication with TOTP

Abhinaytrader

[abhidnpc@server319 flarum]$ composer remove ianm/two-factor
ianm/two-factor is not required in your composer.json and has not been removed
./composer.json has been updated
Running composer update ianm/two-factor
Loading composer repositories with package information
Package "ianm/two-factor" listed for update is not locked.
Updating dependencies
Nothing to modify in lock file
Installing dependencies from lock file (including require-dev)
Nothing to install, update or remove
Package fgrosse/phpasn1 is abandoned, you should avoid using it. No replacement was suggested.
Package swiftmailer/swiftmailer is abandoned, you should avoid using it. Use symfony/mailer instead.
Package zerosonesfun/flarum-member is abandoned, you should avoid using it. No replacement was suggested.
Generating autoload files
99 packages you are using are looking for funding.
Use the composer fund command to find out more!
No security vulnerability advisories found

i tried uninstall, my website still getting same error

IanM

Abhinaytrader sorry, my mistake, the command is
composer update ianm/twofactor
or
composer remove ianm/twofactor

Derbosik

IanM

Abhinaytrader

finally website started working. thanks @IanM

IanM

Derbosik upgrade IanM

Derbosik

IanM Activating the extension causes it to error out no matter the upgrade

Derbosik

IanM Any way to fix it? (upgrading isn't helping out)

peopleinside

Derbosik The same error was made when the extension Draft was updated by Ianm, seems same error is happening after this update, reading your message. You may need wait a reply and maybe an update fix.

I'm using a different two facto extension so I don't have this issue and never try this extension yet 🙂

I hope in the future Flarum can have some workflow that avoid extension to create this error that forbid admin to access the admin side and also front end side.

For remove the error you may remove the extension:
# composer remove require ianm/twofactor

Be sure to made a backup before do this, two factor will be disabled if the extension is removed.

IanM

Derbosik Upgrade to 1.0.5 - the issue is now fully resolved

HarMan

when i enabled this version of 2FA, it working nicely for forgot-password but i cannot login after logout...
after that i change to https://github.com/Nearata/flarum-ext-twofactor

IanM

HarMan what was the error you faced?

HarMan

IanM it said, credential error... but email/username and password correctly
i think because there is no form to enter the 2fa code

IanM

HarMan after the credentials have been entered, if 2FA is required for the account, it will be asked for within the same user modal (if using standard login), or a seperate flow if via an OAuth provider

HarMan

ohhh but I didn't go to the page/modal to input the 2fa code, even though I had entered the username and password correctly

EDIT
the problem I am facing, basically I can't log in because I didn't input the 2fa code because the system says the credentials are not correct username/password

IanM

HarMan I agree it could be cleaner for this step. I have a couple of ideas, let me see what I can do here…

rafaucau

HarMan the problem I am facing, basically I can't log in because I didn't input the 2fa code because the system says the credentials are not correct username/password

Same. I can't log in on another device after logging out. The error Your login details were incorrect appears.

{"errors":[{"status":"401","code":"not_authenticated"}]}

When I disable the extension then I can log in. No errors in the logs. On the test site it works but on production it does not. Both sites are the same.

IanM

1.0.7 What's Changed

fix: make hardcoded strings translatable by @rafaucau in imorland/flarum-ext-twofactor12

New Contributors

@rafaucau made their first contribution in imorland/flarum-ext-twofactor12

Full Changelog: imorland/flarum-ext-twofactor1.0.6 → 1.0.7

dekrypted

rafaucau having same issue, works fine when 2fa is disabled but reenabling it the issue comes right back. definitely a problem with 2fa extension.

never really used php so it was tough digging through source, but i bet its some stupid issue like improperly unpacking params or such. either way i hope it can resolved, because besides this, this is a really solid extension!

zufusion

rafaucau the same here

IanM

1.0.8

chore: add PHPStan by @rafaucau in imorland/flarum-ext-twofactor13
fix: PHP 8.0 causes errors with 3rd party library. Begin adding tests. Address PHPStan by @IanM in imorland/flarum-ext-twofactor14
fix: improve login flow when 2fa required by @IanM in imorland/flarum-ext-twofactor16

This should address the issues raised by zufusion dekrypted rafaucau

Please let me know if you continue to experience problems, and I will look into it again..

Full Changelog: imorland/flarum-ext-twofactor1.0.7 → 1.0.8

Updating

composer update ianm/twofactor
php flarum cache:clear

IanM

Update : I'm continuing to look into the cause of issues reported with the extension. So far, I have identified a couple of small issues, but the major issue found is the need for a minimum PHP version of 8.1, not 8.0 as currently specified in the extension's composer.json.

I've updated the OP with this PHP requirement, and once other issues have been addressed I will release a new version which includes the correct PHP requirement.

IanM

dekrypted I've put some time aside this coming weekend to fix this issue 🙂

Look out for an update soon!

« Previous Page Next Page »