Two Factor Authentication Two Factor Authentication
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Two Factor Authentication

Started by ron4mac, March 21, 2021, 05:21:33 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

ron4mac

This plugin provides a method for Two Factor Authentication (2FA) using Google Authenticator compatible apps.

When viewing the My Profile screen, there will be an additional main menu item to allow 2FA activation.

REQUIRED: CPG 1.6.11 or later

Update v1.1: provides emergency, one-use codes (reinstall required if using v1.0)

Spanish language added (thank you FrA1l3)

phill104

It is a mistake to think you can solve any major problems just with potatoes.

FrA1l3

You are incredible!,

Hello,
Thank you very much for the effort.
And above all for the inconvenience.

I tell you what I have seen, in my case I have tried in two galleries, one is:

1.6.10 (STABLE) and a fully custom theme
Installed plugins:
PLUGIN ENLARGEIT! (ENLARGEIT): V1.16
CoreH5A Upload (upload_h5a): v1.1
CoreSWF Upload (upload_swf): v1.0
CoreSGL Upload (upload_sgl): v1.0
File replacer (file_replacer): v1.10
VISIBLE HOOKPOINTS (VISIBLEHOOKPOINTS): V4.1


and the other is 1.6.07 (stable) and the default 'curve' theme without any modification or hack
Installed plugins:
CoreH5A Upload (upload_h5a): v1.1
CoreSWF Upload (upload_swf): v1.0
CoreSGL Upload (upload_sgl): v1.0
File replacer (file_replacer): v1.10


It tells me that the plugin "minimun requirements not met" in both cases.
I haven't been able to see anything in the logs and I don't know how I can provide more information about why it won't let me install it.

best regards

phill104

Both need to be upgraded to 1.6.11 as that is the version with the hook points added.
It is a mistake to think you can solve any major problems just with potatoes.

FrA1l3

Thank you, I updated to 1.6.11 and now I can configure the 2FA. It's working like a charm.

I have tested it with Authy, which is the application I use, that is, it is also compatible and works.
And I have tried to log in several times and it works fine.

(https://i.imgur.com/wYHaQOB.png)


So, many many thanks, awesome work and thank you so much.
Best regards team!

ron4mac

I didn't think to provide emergency, one-use codes in the case there is no access to an authenticator ... or some sort of mishap.  I'll post version 1.1 shortly that will have emergency, one-use codes provided. Unfortunately, a reinstall of the plugin will be necessary.  :(

FrA1l3

Hello! I have uninstalled v1.0 and installed v.1.1 and I see it installed, but I do not get the 2FA option now and it does not ask me for the code that I had configured with 1.0.

I have cleared cache and tried incognito mode just in case.
Best regards

FrA1l3

I have taken the liberty of translating the language file in case you want to include Spanish from Spain.

ron4mac

Quote from: FrA1l3 on March 23, 2021, 01:58:53 PM
Hello! I have uninstalled v1.0 and installed v.1.1 and I see it installed, but I do not get the 2FA option now and it does not ask me for the code that I had configured with 1.0.

You have to reactivate from the My Profile.

ron4mac

Quote from: FrA1l3 on March 23, 2021, 02:08:13 PM
I have taken the liberty of translating the language file in case you want to include Spanish from Spain.
Thank you.

FrA1l3

#10
Hello!,

Sorry I try to reactivate after deinstall 1.0 and reinstall 1.0 and 1.1, but I got this message:


March 23, 2021 at 02:43 PM - While executing query 'SELECT secret,ecodes FROM cpgxxx_plugin_user2FA WHERE uid=1' in plugins/user2FA/user2fa.php on line 120 the following error was encountered:
1054 : Unknown column 'ecodes' in 'field list'


if I simply upload version 1.0 behind 1.1 it works fine again

ron4mac

You have to uninstall the plugin from the Plugin Manager (which will cause that table to be removed). Then put the v1.1 plugin in place and install from the Plugin Manager. That should create the proper table.

FrA1l3

Hello good!,

Ok now yes. I think my problem was that having 1.0 installed over 1.1 and gave that error.
What I did was uninstall everything and make sure that the new table was not in the DB.
By directly installing version 1.1 it already works and when activating 2FA it already provides the emergency codes.

So thank you very much for the work,