[TH] Two Step Authentication Essentials [Deleted]

Jake B. said:
That's actually something we've fixed for version 2 (for xf2), it doesn't require any additional clicks you just open the page and it'll tell you to press the button on your YubiKey (or whatever U2F device you're using)
Click to expand...

Did the XF2 version ever get released? Can't find it anywhere.
 
doublespaces said:
Did the XF2 version ever get released? Can't find it anywhere.
Click to expand...
Deebs said:
@Mike Creuzer Same question as the post above, any news on the XF2 version?
Click to expand...
Don't believe this is something we are planning on offering for XenForo 2.x but if anything changes we will leave an updated reply! :)

EDIT: Turns out this is something that has been started but never finished as mentioned by Mike below, apologies for the confusion.
 
Last edited:
Jake B. said:
That's actually something we've fixed for version 2 (for xf2), it doesn't require any additional clicks you just open the page and it'll tell you to press the button on your YubiKey (or whatever U2F device you're using)
Click to expand...
Dalton Prock said:
Don't believe this is something we are planning on offering for XenForo 2.x but if anything changes we will leave an updated reply! :)
Click to expand...

According to @Jake B. there is a version 2 for XF2....
 
Mike Creuzer said:
I think Jake had said he had started this, not sure if we ever completed it.

eta: Hi @Deebs !! :p
Click to expand...
NO!! Don't do this to me, my addon developer retired, so I need you to persuade @Jake B. to finish it for those of use who use it. Now that google has jumped on the bandwagon and ver5 of yubikey is out. Pretty please :)
 
Deebs said:
NO!! Don't do this to me, my addon developer retired, so I need you to persuade @Jake B. to finish it for those of use who use it. Now that google has jumped on the bandwagon and ver5 of yubikey is out. Pretty please :)
Click to expand...

The two factor authentication part is done IIRC, there were just some other things that I wanted to add before we release it, just haven't had time
 
Jake B. said:
The two factor authentication part is done IIRC, there were just some other things that I wanted to add before we release it, just haven't had time
Click to expand...

Please let me know as I will make this purchase. There are a number of folks that bought the Google Titan set or have a U2F compliant key (or they would if they knew they could).
 
@Jake B. Any news on the release of the v2.x version of this addon?

Also, I think something has broken recently as now I cannot use Yubikey's as a two factor authentication anymore. Everytime it returns The two-step verification value could not be confirmed. Please try again.

Any ideas?
 
@Jake B. @Mike Creuzer

Guys, found out the reason why it is not working. For some reason the modified library file Yubico.php is not using https and when you use http it gives a modifed response which is hidden due to curlerror being set to true so the response always fail. After some debugging I eventually got the error message from Yubico which led me to the following page:

status.yubico.com

Deprecating YubiCloud v1 protocol, plain-text requests and old TLS versions

Starting on December 10th, 2018, support for YubiCloud v1 protocol, plain-text requests and old TLS protocols & ciphers will be deprecated. On February 4th, 2019 support for such requests will …
status.yubico.com status.yubico.com

So I manually edited the Yubico.php to use https and it is now working. Any reason why it is not defaulting to https as there is a flag set to use it and there is some logic to use https.

Also, any news on the release of the v2.x version?
 
Deebs said:
Also, any news on the release of the v2.x version?
Click to expand...
As far as I am aware we don't have this planned yet. Sometimes @Jake B. will invest time in some of these smaller projects as he can, so tagging him. As it stands, we aren't adding new products (besides a few ones that are pending release) without them being funded. And even then we aren't sure if we want to support funded add-ons. Kind of outgrowing the benefit of maintaining huge piles of add-ons. We're going to be focusing on a small list that gets all the attention.
 
You must log in or register to reply here.
Top Bottom