[CDB] phpBB two factor authentication

A place for Extension Authors to post and receive feedback on Extensions still in development. No Extensions within this forum should be used within a live environment!
Scam Warning
Forum rules
READ: phpBB.com Board-Wide Rules and Regulations

IMPORTANT: Extensions Development rules

IMPORTANT FOR NEEDED EVENTS!!!
If you need an event for your extension please read this for the steps to follow to request the event(s)
Locked
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 28616
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

[CDB] phpBB two factor authentication

Post by Paul »

Extension Name: phpBB two factor authentication
Author: Paul

Extension Description: This extension adds support for the two factor authentication in your phpBB forum.
You can set several options within this extension:
  • Disable 2FA completly (Basicly disabling the extension!)
  • Do not require 2FA, but give it as option to users
  • Require 2FA for users with a_ permissions only, and only to login for the ACP
  • Require 2FA for users with a_ permissions only
  • Require 2FA for users with a_ or m_ permissions only
  • Require 2FA for all users
Depending on the choosen setting 2FA is required at registration (If a new user is registered), or a user is directly asked after login to update his profile with his key.

This extension currently supports the following types of two factor authentication:
  • U2F (See below)
  • TOTP (For example Google authenticator)
  • Backup keys
Since version 0.0.1 this extension has been mostly rewritten. Do not use this extension on a live board yet.
This is a very first version of the extension. There are still a few things which need to be fixed. Please test this only locally.
Issues can be reported at github (See below).

Extension Version: 0.0.5

Requirements:
  • phpBB 3.2.0
  • openSSL (At least 1.0.0)
  • A secure connection (There are no specific requirements for the certificate. A self signed certicate will work as well as a extended validated certificate) if you want to use U2F
Screenshots: Coming soon

Limitations to U2F security keys
Due to limitations set by the U2F standard a secure connection is required. Currently, U2F is only supported in Google Chrome. Firefox and Edge are working on support U2F as well, once they do support it this extension will be updated.
Ofcourse the user will also need a U2F compatible security key, for example from Yubico.

Download & Support
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 28616
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul »

*reserved*
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 28616
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul »

A first version of this extension can be downloaded at https://github.com/paul999/phpbb_2fa/re ... tag/v0.0.1
Please remember that this extension has a few requirements and limitations. Please make sure to read the first post
User avatar
scuba323
Registered User
Posts: 6
Joined: Fri Feb 06, 2015 7:24 pm
Name: Stephen Vanderwarker
Contact:

Re: [DEV]phpBB two factor authentication

Post by scuba323 »

Just installed this on my forum, and I get a 500 when I try to access the UCP menu for it.
User avatar
david63
Registered User
Posts: 20646
Joined: Thu Dec 19, 2002 8:08 am

Re: [DEV]phpBB two factor authentication

Post by david63 »

Did you miss this
Paul wrote:No Extensions within this forum should be used within a live environment!
David
Remember: You only know what you know and - you don't know what you don't know!

I now no longer support any of my extensions but they will start to become available here
User avatar
3Di
I've Been Banned!
Posts: 17538
Joined: Mon Apr 04, 2005 11:09 pm
Location: I'm with Ukraine 🇺🇦
Name: Marco
Contact:

Re: [DEV]phpBB two factor authentication

Post by 3Di »

Or this?
Paul wrote: phpBB 3.1.7RC1 (Or this change: https://github.com/phpbb/phpbb/pull/4004 )
🆓 Free support for our extensions also provided here: phpBB Studio
🚀 Looking for a specific feature or alternative option? We will rock you!
Please PM me only to request paid works. Thx. Buy me a coffee -> Image
My development's activity º PhpStorm's proud user º Extensions, Scripts, MOD porting, Update/Upgrades
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 28616
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul »

Or in any other case, are there any errors in the apache error log?
User avatar
scuba323
Registered User
Posts: 6
Joined: Fri Feb 06, 2015 7:24 pm
Name: Stephen Vanderwarker
Contact:

Re: [DEV]phpBB two factor authentication

Post by scuba323 »

Paul wrote:Or in any other case, are there any errors in the apache error log?
Paste of apache log.
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 28616
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul »

It seems the autoloader isn't loading the dependencies. What phpBB and php version are you using?
User avatar
scuba323
Registered User
Posts: 6
Joined: Fri Feb 06, 2015 7:24 pm
Name: Stephen Vanderwarker
Contact:

Re: [DEV]phpBB two factor authentication

Post by scuba323 »

Paul wrote:It seems the autoloader isn't loading the dependencies. What phpBB and php version are you using?
3.1.6
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 28616
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul »

Did you read the requirements? It is clearly stated, and even quoted by 3Di afterwards that 3.1.7RC1 is required for this extension.
xCanadianz
Registered User
Posts: 60
Joined: Sun Dec 23, 2012 6:34 am

Re: [DEV]phpBB two factor authentication

Post by xCanadianz »

When do you plan to release this, and does it work with Google Authenticator?
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 28616
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul »

I am currently in the process of moving, so once that is done I will start working on my extensions again :). Currently it doesn't work with Google Authenticator, but the next release probably will.
xCanadianz
Registered User
Posts: 60
Joined: Sun Dec 23, 2012 6:34 am

Re: [DEV]phpBB two factor authentication

Post by xCanadianz »

Paul wrote:I am currently in the process of moving, so once that is done I will start working on my extensions again :). Currently it doesn't work with Google Authenticator, but the next release probably will.
Okay, thank you.
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 28616
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: [DEV]phpBB two factor authentication

Post by Paul »

So, in the last few days I had finally some time to finish up rewriting most of this extension. This extension now supports the following three two factor standard:
  • U2F (See for limitions the start post)
  • TOTP (Google authenticator etc.)
  • backup keys
As this extension now uses a sort of module system, adding extra standards is pretty straight forward. There are still some issues I need to fix, and I want some stuff to be refactored, before I want to submit it to the CDB. Once it is validated for the first time, I will start adding new standards.
If you want a standard to be implemented into this extension, please create a issue at the tracker in github: https://github.com/paul999/phpbb_2fa/issues Bugs can also be reported here.

Download: https://github.com/paul999/phpbb_2fa/re ... tag/v0.0.2
Do not use this extension in production! This is a unfinished extension which might cause issues on your board!
Locked

Return to “Extensions in Development”