paul999/tfa

This extension adds support for two factor authentication into your phpBB board.

0.0.5 2019-09-06 14:05 UTC

Requires

• php: >=5.4.0
• ext-json: *
• ext-openssl: *
• composer/installers: ~1.0
• marc1706/otp-authenticate: ~1.0
• paragonie/random_compat: ~1.4|~2.0
• paul999/u2flib-server: dev-master

Requires (Dev)

• phing/phing: 2.4.*
• phpbb/epv: dev-master

GPL-2.0-only

• Paul Sohier

README

phpBB extension to implement 2FA

This extension adds support for two factor authentication using several different security keys. Currently, the following security keys are available by default:

• U2F (See below)
• Google authenticator (Or compatible)
• Backup keys

New type of keys can be added by following the instructions in the documentation.

You can set several options within this extension:

• Disable 2FA completly (Basicly disabling the extension!)
• Do not require 2FA, but give it as option to users
• Require 2FA for users with a_ permissions only, and only to login for the ACP
• Require 2FA for users with a_ permissions only
• Require 2FA for users with a_ or m_ permissions only
• Require 2FA for all users

Depending on the choosen setting 2FA, the board will be limit available for the user if a 2FA key is required. Only when the option Do not require 2FA, but give it as option to users is selected, the board won't be limited.

U2F

Currently, the browser support for U2F is limited:

Supported:

• Google Chrome (Version 41 and later)

Not supported:

• Safari
• Firefox (Not supported yet. Support will be added in a upcoming release)
• Internet Explorer
• Edge

Test if your browser supports U2F

You will need a U2F capable security key for this to work. Yubico (and others) does provide them.

Besides the browser requirements, U2F requires that your board runs under SSL. Without SSL the U2F key won't work, and you will not be able to select this type of key to add. This is a limitation from U2F.

Please note that this extension currently is build on the U2F protocol, and doesn't support the new WebAuthn yet. Support for WebAuthn might be added later (Including extra browser support).

Installation

Download the latest release and and extract the download to ext/paul999/tfa/ and enable it

Updating

Disable the extension in your ACP, extra the zip to ext/paul999/tfa and enable it

Translations

Please create a PR on the master branch. Only translations submitted by PR are accepted. I will start merging translation PRs when stable versions are going to be released. Incomplete translations at that point won't be merged.

Bugs/Feature requests

Bugs and feature requests can be made at the github issue tracker.