add the possibility of 2FA add the possibility of 2FA
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

add the possibility of 2FA

Started by FrA1l3, March 17, 2021, 09:34:44 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

FrA1l3

Hi, has anyone explored the feasibility of including a 2FA in coppermine? either through plugin or within the code itself? I would be interested in developing the idea via plugin. Just ask for a google authenticator / Authy token or similar.
If someone has started with it, it would be nice to gather ideas.

phill104

I don't think this has been looked at in any way. I look forward to seeing what you come up with as it is a great idea.
It is a mistake to think you can solve any major problems just with potatoes.

ron4mac

I think a plugin could be the most appropriate way to add 2FA to CPG.  The current problem in creating such a plugin is that the login process is/was written without any accommodation for plugins to intervene. When I have some extra time, I'll investigate it more fully.

phill104

Hopefully we could just add a hook for it. One user added bridging just so they could use 2FA from their bridged app. Seemed very extreme to install PHPbb just for its 2FA but some will go to any extent.
It is a mistake to think you can solve any major problems just with potatoes.

ron4mac

#4
I've hacked together a Beta plugin to provide CPG with 2FA. Those willing to try it out ... please provide feedback. Especially useful will be any issues it may cause with login forms in various themes.

[ see released plugin ]


FrA1l3

Awesome, thank you in advance. I will comment here.

best regards