causal/mfa-protect

Protect rendering of sensitive content elements with MFA.

0.2.0 2023-10-21 15:39 UTC

Requires

• php: >=7.4.0 <=7.4.99 || >=8.0.0 <=8.2.99
• typo3/cms-core: ^10 || ^11 || ^12

GPL-3.0-or-later

• Xavier Perseguers

• security
• secure
• protection
• TYPO3 CMS
• MFA

README

This extension lets you force the use of a recent MFA token before rendering a content element.

This may be used together with standard access restrictions in TYPO3 such as being part of one or more Frontend user groups.

This screenshot shows how a given content element will be protected:

Installation

Install the extension either from TYPO3 Extension Repository (TER), or from packagist.org with Composer:

composer require causal/mfa-protect

In addition, you will need some extension adding support for Frontend MFA. At the time of writing, the only one the author can think of is its own extension EXT:mfa_frontend.

You may install it either from TER as well, or with Composer:

composer require causal/mfa-frontend

Configuration

Include the static template "Protect MFA" to your (main) TypoScript template.

You can then use the Constants Editor or pure TypoScript to override the template location and the validity of the MFA token (it defaults to 30 minutes).

Hint: the validity of the MFA token supports stdWrap :-)

Usage

Edit any content element, switch to Access and toggle the MFA protect flag. That's it!