That's actually something we've fixed for version 2 (for xf2), it doesn't require any additional clicks you just open the page and it'll tell you to press the button on your YubiKey (or whatever U2F device you're using)
That's actually something we've fixed for version 2 (for xf2), it doesn't require any additional clicks you just open the page and it'll tell you to press the button on your YubiKey (or whatever U2F device you're using)
NO!! Don't do this to me, my addon developer retired, so I need you to persuade @Jake B. to finish it for those of use who use it. Now that google has jumped on the bandwagon and ver5 of yubikey is out. Pretty please
NO!! Don't do this to me, my addon developer retired, so I need you to persuade @Jake B. to finish it for those of use who use it. Now that google has jumped on the bandwagon and ver5 of yubikey is out. Pretty please
Please let me know as I will make this purchase. There are a number of folks that bought the Google Titan set or have a U2F compliant key (or they would if they knew they could).
@Jake B. Any news on the release of the v2.x version of this addon?
Also, I think something has broken recently as now I cannot use Yubikey's as a two factor authentication anymore. Everytime it returns The two-step verification value could not be confirmed. Please try again.
Guys, found out the reason why it is not working. For some reason the modified library file Yubico.php is not using https and when you use http it gives a modifed response which is hidden due to curlerror being set to true so the response always fail. After some debugging I eventually got the error message from Yubico which led me to the following page:
Starting on December 10th, 2018, support for YubiCloud v1 protocol, plain-text requests and old TLS protocols & ciphers will be deprecated. On February 4th, 2019 support for such requests will …
status.yubico.com
So I manually edited the Yubico.php to use https and it is now working. Any reason why it is not defaulting to https as there is a flag set to use it and there is some logic to use https.
Also, any news on the release of the v2.x version?
As far as I am aware we don't have this planned yet. Sometimes @Jake B. will invest time in some of these smaller projects as he can, so tagging him. As it stands, we aren't adding new products (besides a few ones that are pending release) without them being funded. And even then we aren't sure if we want to support funded add-ons. Kind of outgrowing the benefit of maintaining huge piles of add-ons. We're going to be focusing on a small list that gets all the attention.