[DEV]phpBB two factor authentication

A place for Extension Authors to post and receive feedback on Extensions still in development. No Extensions within this forum should be used within a live environment!
Get Involved
Forum rules
READ: phpBB.com Board-Wide Rules and Regulations

IMPORTANT: Extensions Development rules

IMPORTANT FOR NEEDED EVENTS!!!
If you need an event for your extension please read this for the steps to follow to request the event(s)
User avatar
Paul
Extension Customisations
Extension Customisations
Posts: 23213
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

[DEV]phpBB two factor authentication

Post by Paul » Sun Oct 25, 2015 9:43 am

Extension Name: phpBB two factor authentication
Author: Paul

Extension Description: This extension adds support for the two factor authentication in your phpBB forum.
You can set several options within this extension:
  • Disable 2FA completly (Basicly disabling the extension!)
  • Do not require 2FA, but give it as option to users
  • Require 2FA for users with a_ permissions only, and only to login for the ACP
  • Require 2FA for users with a_ permissions only
  • Require 2FA for users with a_ or m_ permissions only
  • Require 2FA for all users
Depending on the choosen setting 2FA is required at registration (If a new user is registered), or a user is directly asked after login to update his profile with his key.

This extension currently supports the following types of two factor authentication:
  • U2F (See below)
  • TOTP (For example Google authenticator)
  • Backup keys
Since version 0.0.1 this extension has been mostly rewritten. Do not use this extension on a live board yet.
This is a very first version of the extension. There are still a few things which need to be fixed. Please test this only locally.
Issues can be reported at github (See below).

Extension Version: 0.0.2

Requirements:
  • phpBB 3.1.7RC1 (Or this change: https://github.com/phpbb/phpbb/pull/4004 )
  • openSSL (At least 1.0.0)
  • A secure connection (There are no specific requirements for the certificate. A self signed certicate will work as well as a extended validated certificate) if you want to use U2F
Screenshots: Coming soon

Demo URL: https://www.phpbb-2fa.com/
Demo Username: Sorry, you need to register yourself for security reasons. This board is partly used as development board, so it might be in a non working condition.

Limitations to U2F security keys
Due to limitations set by the U2F standard a secure connection is required. Currently, U2F is only supported in Google Chrome. Firefox and Edge are working on support U2F as well, once they do support it this extension will be updated.
Ofcourse the user will also need a U2F compatible security key, for example from Yubico.

No Extensions within this forum should be used within a live environment!

Extension Download: https://github.com/paul999/phpbb_2fa/re ... tag/v0.0.2
Github: https://github.com/paul999/phpbb_2fa
Issues: https://github.com/paul999/phpbb_2fa/issues
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development

User avatar
Paul
Extension Customisations
Extension Customisations
Posts: 23213
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul » Sun Oct 25, 2015 9:43 am

*reserved*
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development

User avatar
Paul
Extension Customisations
Extension Customisations
Posts: 23213
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul » Sat Oct 31, 2015 5:51 pm

A first version of this extension can be downloaded at https://github.com/paul999/phpbb_2fa/re ... tag/v0.0.1
Please remember that this extension has a few requirements and limitations. Please make sure to read the first post
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development

User avatar
scuba323
Registered User
Posts: 6
Joined: Fri Feb 06, 2015 7:24 pm
Name: Stephen Vanderwarker
Contact:

Re: [DEV]phpBB two factor authentication

Post by scuba323 » Mon Dec 07, 2015 10:19 pm

Just installed this on my forum, and I get a 500 when I try to access the UCP menu for it.

User avatar
david63
Jr. Extension Validator
Posts: 12179
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: [DEV]phpBB two factor authentication

Post by david63 » Mon Dec 07, 2015 10:33 pm

Did you miss this
Paul wrote:No Extensions within this forum should be used within a live environment!
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email or as they will be ignored

User avatar
3Di
Registered User
Posts: 11362
Joined: Mon Apr 04, 2005 11:09 pm
Location: Milano - Frankfurt
Name: Marco
Contact:

Re: [DEV]phpBB two factor authentication

Post by 3Di » Mon Dec 07, 2015 10:36 pm

Or this?
Paul wrote: phpBB 3.1.7RC1 (Or this change: https://github.com/phpbb/phpbb/pull/4004 )
Want to compensate me for my interest? You can.
You can pm me only in case of request for paid job. Thx.
MOD conversions, Extensions and Scripts for phpBB.

User avatar
Paul
Extension Customisations
Extension Customisations
Posts: 23213
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul » Tue Dec 08, 2015 6:36 am

Or in any other case, are there any errors in the apache error log?
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development

User avatar
scuba323
Registered User
Posts: 6
Joined: Fri Feb 06, 2015 7:24 pm
Name: Stephen Vanderwarker
Contact:

Re: [DEV]phpBB two factor authentication

Post by scuba323 » Wed Dec 09, 2015 4:30 pm

Paul wrote:Or in any other case, are there any errors in the apache error log?
Paste of apache log.

User avatar
Paul
Extension Customisations
Extension Customisations
Posts: 23213
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul » Wed Dec 09, 2015 5:25 pm

It seems the autoloader isn't loading the dependencies. What phpBB and php version are you using?
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development

User avatar
scuba323
Registered User
Posts: 6
Joined: Fri Feb 06, 2015 7:24 pm
Name: Stephen Vanderwarker
Contact:

Re: [DEV]phpBB two factor authentication

Post by scuba323 » Mon Dec 14, 2015 3:31 pm

Paul wrote:It seems the autoloader isn't loading the dependencies. What phpBB and php version are you using?
3.1.6

User avatar
Paul
Extension Customisations
Extension Customisations
Posts: 23213
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul » Mon Dec 14, 2015 6:37 pm

Did you read the requirements? It is clearly stated, and even quoted by 3Di afterwards that 3.1.7RC1 is required for this extension.
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development

xCanadianz
Registered User
Posts: 60
Joined: Sun Dec 23, 2012 6:34 am

Re: [DEV]phpBB two factor authentication

Post by xCanadianz » Fri Feb 19, 2016 2:49 am

When do you plan to release this, and does it work with Google Authenticator?

User avatar
Paul
Extension Customisations
Extension Customisations
Posts: 23213
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul » Fri Feb 19, 2016 7:30 am

I am currently in the process of moving, so once that is done I will start working on my extensions again :). Currently it doesn't work with Google Authenticator, but the next release probably will.
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development

xCanadianz
Registered User
Posts: 60
Joined: Sun Dec 23, 2012 6:34 am

Re: [DEV]phpBB two factor authentication

Post by xCanadianz » Thu Feb 25, 2016 7:44 am

Paul wrote:I am currently in the process of moving, so once that is done I will start working on my extensions again :). Currently it doesn't work with Google Authenticator, but the next release probably will.
Okay, thank you.

User avatar
Paul
Extension Customisations
Extension Customisations
Posts: 23213
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul » Sat Aug 06, 2016 6:37 pm

So, in the last few days I had finally some time to finish up rewriting most of this extension. This extension now supports the following three two factor standard:
  • U2F (See for limitions the start post)
  • TOTP (Google authenticator etc.)
  • backup keys
As this extension now uses a sort of module system, adding extra standards is pretty straight forward. There are still some issues I need to fix, and I want some stuff to be refactored, before I want to submit it to the CDB. Once it is validated for the first time, I will start adding new standards.
If you want a standard to be implemented into this extension, please create a issue at the tracker in github: https://github.com/paul999/phpbb_2fa/issues Bugs can also be reported here.

Download: https://github.com/paul999/phpbb_2fa/re ... tag/v0.0.2
Do not use this extension in production! This is a unfinished extension which might cause issues on your board!
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development

Post Reply

Return to “Extensions in Development”

Who is online

Users browsing this forum: Bing [Bot], Hartenheer, lifeguard81, Mauron, oBot and 25 guests

cron