[FreddysHouse] Two-factor Authentication

[FreddysHouse] Two-factor Authentication 1.3.3

No permission to download
For the curious, I plan on adding a "don't ask me again on this computer for X days" feature, similar to Google and Blizzard etc. so you'll only get asked if you switch browser or login from somewhere else.
Oh great. It would be much more practical to not get asked multiple times a day on my computer.
Thanks for sharing the great addon.
 
Current version would throw error when add/edit user in AdminCP, because you save XenForo_DataWriter_User without valid user's inputed data.
 
SheepCow updated [FreddysHouse] Two-factor Authentication with a new update entry:

Now with "remember this device"!

This version includes a couple of bug fixes along with the new feature ...

Remember this device - this allows your users to remember a device (i.e. their current web browser) and skip two-factor login for a number of days (configured in the admin control panel).

Logins to the admin control panel are currently exempt and require two-factor on every login.

Read the rest of this update entry...
 
There might be an issue on login (after entering your two-factor key you get sent to the signup page) if you're using memcached -- if you are using memcached and do or don't have this problem, can you let me know as I'm a bit stumped atm!

It looks like it's saving data to the session ok but then can't get that data back again
 
There might be an issue on login (after entering your two-factor key you get sent to the signup page) if you're using memcached -- if you are using memcached and do or don't have this problem, can you let me know as I'm a bit stumped atm!

It looks like it's saving data to the session ok but then can't get that data back again
I am having this issue and I am using memcached... Please advice.
 
Some feedback from my users ...


I haven;t used Google Authenticator yet and thought it might be similar to a Bar Code Scanner which I do use.
Seems it needs both or just Google Authenticator and manual enter the key into it.

I wasn't aware of Google Authenticator and needed to search for it.
Suggestion is to link to Google Authenticator on the Play Store to save searching for it.

Also include info on that page with just how this two-step verification works or a link to a page that has that info.

So they want;
1. the 'QR code' words in the 1st paragraph to be a link (to Wikipedia?) that tells them about QR codes.
2. the 'Google Authenticator' words in the 1st paragraph to be a link to download it from respectives devices app store.
3. A link, or some text, that briefly describes what Google's 2-step is and how it works for websites.


Thanks.
 
Do you know when we can expect to see the memcached issue resolved? because I would really like to install this add-on on my board and start using my Yubikey

Thanks
 
okay after update my addon broke and gives me this


Server Error
Mysqli prepare error: Table 'minecraf_board.fh_twofactor_trusted' doesn't exist

  1. Zend_Db_Statement_Mysqli->_prepare() in Zend/Db/Statement.php at line 115
  2. Zend_Db_Statement->__construct() in Zend/Db/Adapter/Mysqli.php at line 381
  3. Zend_Db_Adapter_Mysqli->prepare() in Zend/Db/Adapter/Abstract.php at line 478
  4. Zend_Db_Adapter_Abstract->query() in XenForo/Model.php at line 219
  5. XenForo_Model->fetchAllKeyed() in FreddysHouse/TwoFactor/Model/TwoFactorTrust.php at line 78
  6. FreddysHouse_TwoFactor_Model_TwoFactorTrust->getTrustForUser() in FreddysHouse/TwoFactor/ControllerPublic/Account.php at line 26
  7. FreddysHouse_TwoFactor_ControllerPublic_Account->actionTwoFactor() in XenForo/FrontController.php at line 313
  8. XenForo_FrontController->dispatch() in XenForo/FrontController.php at line 132
  9. XenForo_FrontController->run() in /home/minecraf/public_html/index.php at line 13

so now i'm not even able to disable or login to admin cp at all :(

Fixed above problem but now when i try to login i give my code google auth app gives but admin cp just reloads and asks for code again :( whats making it reloading like this?
 
Last edited:
You can use earlier versions which should be fine... as the later versions are about features, not the authentication process itself.

I think it was simply a mistake to try and include sessions so people didn't have to authenticate on the same machine for x time... I use the 1.1.2 version and have no issues with it.
 
  • Like
Reactions: DRE
Back
Top Bottom