[DigitalPoint] Security 1.2.0.3

[digitalpoint]

I'm using an iPhone 'passkey' that I used to access the forum the first time (via 'Passkey login'). Then I chose to log off... and now when I choose the passkey for the second time:


View attachment 312845


I don't get it. Sorry.

I know it's not your problem @digitalpoint, but can't you please take over development again!

If it’s a Passkey you created pre-2.3 with this addon, they aren’t going to work. They are a different type (resident vs. non-resident). A non-resident is what this addon created, XF uses resident (which allows it to be used for login, not just two-step).

 

[alexm]

If it’s a Passkey you created pre-2.3 with this addon, they aren’t going to work. They are a different type (resident vs. non-resident). A non-resident is what this addon created, XF uses resident (which allows it to be used for login, not just two-step).

It was in v2.3. I don't think I got a choice between 'resident' vs 'non-resident', certainly with iPhone and I think with Yubikey too. It took it, registered it... and then not again. Sorry...

 

[digitalpoint]

It was in v2.3. I don't think I got a choice between 'resident' vs 'non-resident', certainly with iPhone and I think with Yubikey too. It took it, registered it... and then not again. Sorry...

Ya no clue… works fine for me on this site and other 2.3 sites.

 

[alexm]

Looking again in the cold light of day (and with a lot less to drink ) I forgot I’d had this problem before:

XF 2.3 Post in thread 'Logging in via passkey does not work for the forum, but works for admin console.'

Aug 8, 2024

I get the same thing.

Edit: If I click the top right 'Log in' link and the use the 'Passkeys' button on that page, it works!



Could it be something to do with, as it's a test server, the link is gives you is the login page and not the normal forum page?

• alexm

Because it’s a test site I’ve got all of the forum needing to login, hence you get asked for the username/password on the homepage. If you click the ‘Passkey’ button on the homepage it will not work.

But, if you click the ‘Log in’ link and then press the ‘Passkey’ button, it works every time!

Sorry to have wasted your time @digitalpoint!

 

[alexm]

Well since we changed owner to the Xenforo version and re-added @digitalpoint's 'Security' we've not had a single error.

Thank you @digitalpoint!

Regards,

Alex

 

[wahtajoe]

Need setup instructions from start for this addon.

 

[Alpha1]

It would be nice if users could see a list of logged in devices, similar to how Netflix does it. A list of devices Android Phone, PC Firefox, iPad, etc. and the last ttime/date of login. This is very easy to understand for people.
I know members can see their sessions, but non-tech savvy people don't understand it.
A similar button to sign a device out would be handy as well. As well as Sign out on all devices.

 

[dutchbb]

When trying to remove a session from account security page

Server error log

ErrorException: [E_WARNING] Undefined array key 1
src/addons/DigitalPoint/Security/XF/Pub/Controller/Account.php:16

Stack trace
#0 src/addons/DigitalPoint/Security/XF/Pub/Controller/Account.php(16): XF::handlePhpError(2, '[E_WARNING] Und...', '/home/...', 16)
#1 src/XF/Mvc/Dispatcher.php(362): DigitalPoint\Security\XF\Pub\Controller\Account->actionSecuritySessionDelete(Object(XF\Mvc\ParameterBag))
#2 src/XF/Mvc/Dispatcher.php(264): XF\Mvc\Dispatcher->dispatchClass('XF:Account', 'SecuritySession...', Object(XF\Mvc\RouteMatch), Object(SV\SearchImprovements\XF\Pub\Controller\Account), NULL)
#3 src/XF/Mvc/Dispatcher.php(121): XF\Mvc\Dispatcher->dispatchFromMatch(Object(XF\Mvc\RouteMatch), Object(SV\SearchImprovements\XF\Pub\Controller\Account), NULL)
#4 src/XF/Mvc/Dispatcher.php(63): XF\Mvc\Dispatcher->dispatchLoop(Object(XF\Mvc\RouteMatch))
#5 src/XF/App.php(2824): XF\Mvc\Dispatcher->run()
#6 src/XF.php(814): XF\App->run()
#7 index.php(23): XF::runApp('XF\\Pub\\App')
#8 {main}

Request state
array(4) {
  ["url"] => string(42) "/account/security/session/delete?id=197286"
  ["referrer"] => string(46) "/account/security"
  ["_GET"] => array(1) {
    ["id"] => string(6) "197286"
  }
  ["_POST"] => array(5) {
    ["_xfToken"] => string(8) "********"
    ["delete"] => string(6) "delete"
    ["_xfResponseType"] => string(4) "json"
    ["_xfWithData"] => string(1) "1"
    ["_xfRequestUri"] => string(17) "/account/security"
  }
}

No problem removing them in admin cp