Code

Two-factor authentication support#388

Code

Merged

doobry-systemli merged 23 commits intomainsystemli/userli:mainfrom enh/2fa_totpsystemli/userli:enh/2fa_totpCopy head branch name to clipboardOct 26, 2022

+2,203-45

Commits

Commits on Oct 26, 2022

• Basic support for TOTP-based twofactor authentication

  Show description for 67cc978
  doobry-systemli

  committed
  67cc978

• Add custom template for two-factor authentication login form

  doobry-systemli

  committed
  d58e426

• Add forms to enable and disable two-factor authentication

  doobry-systemli

  committed
  701057a

• Enable CSRF protection for two-factor verification at login

  doobry-systemli

  committed
  14b7a0c

• Set issuer, server name and image for TOTP QR code

  doobry-systemli

  committed
  79bf952

• Require confirmation with two-factor token before activating it

  doobry-systemli

  committed
  1d6521f

• Allow to disable two-factor authentication for users from admin interface

  doobry-systemli

  committed
  62a05f5

• Clear two-factor authentication settings during recovery process

  doobry-systemli

  committed
  851c6ed

• Apply code formatting style fixes by php-cs-fixer

  doobry-systemli

  committed
  df0ba6b

• Unit tests for two-factor implementation

  doobry-systemli

  committed
  6cf3714

• Let totpConfirmed default to false in TwofactorTrait.

  Show description for 40ecce1
  doobry-systemli

  committed
  40ecce1

• Add behat integration tests for twofactor authentication

  Show description for f31d3d3
  doobry-systemli

  committed
  f31d3d3

• Display alert about unset two-factor auth as warning, not as error

  doobry-systemli

  committed
  abdf053

• Make issuer, server_name and logo configurable for TOTP QR code

  doobry-systemli

  committed
  9ea8e52

• Don't reset 2FA settings during password recovery process

  doobry-systemli

  committed
  17a12eb

• Add support for twofactor backup codes

  Show description for 2530b20
  doobry-systemli

  committed
  2530b20

• Add behat integration tests for two-factor backup codes

  doobry-systemli

  committed
  8738416

• Clear user twofactor settings when resetting user via console command

  doobry-systemli

  committed
  1f0fc8d

• Clear backup codes and totpConfirmed when resetting 2FA as admin

  doobry-systemli

  committed
  ad4bf26

• Add german translation for twofactor strings

  doobry-systemli

  committed
  53206b7

• Add metrics about accounts with two-factor auth to munin stats

  doobry-systemli

  committed
  28ce32a

• Code style fixes by php-cs-fixer

  doobry-systemli

  committed
  5bb1177

• Remove superfluous comment lines from scheb_2fa config

  doobry-systemli

  committed
  ded11c4