antaresproject / two_factor_auth

:key: 2FA Implementation Antares Component with Google and Yubikey authenticators

Antares Two Factor Auth Module

Antares Two Factor Auth is a package which provides method of confirming a user's identity by utilizing two different authentication components. Implemented with Google and Yubikey authenticators.

Documentation

Antares Two Factor Auth Module documentation is not finished yet.

Full Antares documentation can be found at docs.antaresproject.io/php-framework.

Changelog

Antares Two Factor Auth changelog can be found in release notes docs.antaresproject.io/php-framework/getting-started/changelog/#two-factor-auth.

You can find full Antares changelog in Antares Documentation docs.antaresproject.io/php-framework/getting-started/changelog.

Issues

The issue list of this repo is exclusively for bug reports and feature requests.

Please follow Issue Reporting Guide before opening an issue. Issues not following the guide will be closed without further investigation.

Contribution

Please follow Contribution Guide before making a pull request.

Community

• Twitter: @antaresproject
• Forum: (coming soon)
• Blog: (coming soon)
• Email: contact (at) antaresproject.io

License

This software is released under the BSD 3-Clause License.

© 2017 INBS.Software.

two_factor_auth's Issues

Google Auth for Admin and User provider - "...non-object"

1. Go to admin/settings/security
2. Select Google Auth for Admin and User provider
3. Click Submit

Results:
https://image.prntscr.com/image/P8oVOLlURnquqA1OaXKhqw.png

Several errors after module installation

1. I could not even install extension because of error. Please fix the configuration file: https://github.com/antaresproject/two_factor_auth/blob/master/resources/config/config.php. Valid contract for Google is PragmaRX\Google2FA\Google2FA::class not PragmaRX\Google2FA\Contracts\Google2FA::class.
2. ACL rules have not been added. There was blank page on configuration page. I had to populate database manually and grant permissions.
3. I could not configure any Authentication method because of many errors came out:

Symfony\Component\Debug\Exception\FatalThrowableError: Type error: Argument 1 passed to Antares\Modules\TwoFactorAuth\Processor\UserConfigurationProcessor::isConfigured() must implement interface Antares\Area\Contracts\AreaContract, null given, called in /var/www/antares/src/modules/two_factor_auth/src/Http/Controllers/Admin/AuthController.php on line 80 in /var/www/antares/src/modules/two_factor_auth/src/Processor/UserConfigurationProcessor.php:95

Symfony\Component\Debug\Exception\FatalThrowableError: Type error: Argument 2 passed to Antares\Modules\TwoFactorAuth\Processor\AuthProcessor::verifyCredentials() must implement interface Antares\Area\Contracts\AreaContract, null given, called in /var/www/antares/src/modules/two_factor_auth/src/Http/Controllers/Admin/AuthController.php on line 103 in /var/www/antares/src/modules/two_factor_auth/src/Processor/AuthProcessor.php:90

Illuminate\Contracts\Container\BindingResolutionException: Target [Antares\Area\Contracts\AreaContract] is not instantiable. in /var/www/antares/vendor/laravel/framework/src/Illuminate/Container/Container.php:895

Symfony\Component\Debug\Exception\FatalThrowableError: Type error: Argument 1 passed to Antares\Modules\TwoFactorAuth\Http\Controllers\Admin\ConfigurationController::showProviderConfiguration() must implement interface Antares\Contracts\Html\Builder, instance of Antares\Area\Model\Area given, called in /var/www/antares/src/modules/two_factor_auth/src/Processor/ConfigurationProcessor.php on line 108 in /var/www/antares/src/modules/two_factor_auth/src/Http/Controllers/Admin/ConfigurationController.php:104

Symfony\Component\Debug\Exception\FatalThrowableError: Type error: Argument 3 passed to Antares\Modules\TwoFactorAuth\Processor\ConfigurationProcessor::edit() must be an instance of Antares\Modules\TwoFactorAuth\Model\Provider, instance of Illuminate\Database\Eloquent\Collection given, called in /var/www/antares/src/modules/two_factor_auth/src/Http/Controllers/Admin/ConfigurationController.php on line 86

Two factor auth from the custommer profile level - lang

1. Activate Two Factor module
2. Go to admin account summary and look at "Two Factor Auth" section

Results:

There is displayed: antares/two_factor_auth::users.manage_two_factor_auth_for_user

https://image.prntscr.com/image/C_g5wnTkS-y4z6_bUmvs6Q.png

Possibility of blocking login because of Two Factor

1. Enable Two Factor for Admin Account
2. Log out from app
3. Log in - There will be displayed two factor authentication configuration page (code to scan)
4. Click "Cancel"
5. Try to log in one more time

Results:

There is displayed "Please confirm the code below", and there is no possibility to log in, because I clicked "Cancel" on configuration step, and I don't have a verification code.

No possible to enable 2factor from CA level

1. Go to admin/settings/security and enabled Google auth for User Provider
2. Log to CA as random user, and then go to My Account
3. Click "Enable 2FA"

Results:
The page was refreshed, but 2factor is still disabled for this user