Multi factor authentication using Google Authenticator - #5166

Open

kbwhizz wants to merge 21 commits into

fisharebest:mainfrom

kbwhizz:2fa_v9

Commits on Jun 22, 2025

MFA authentication for webtrees. Integrates with setup, admin account user creation and user account editing to activate per account. Uses Google Authenticator.
kbwhizz
committed
Adding ability for site admin to switch 2fa on or off site-wide
kbwhizz
committed
Reinstate account update tests, removing secret defined value as parameter
kbwhizz
committed
remove old composer.lock
kbwhizz
committed
Removing old css image files no longer in wt
kbwhizz
committed
checking if site is enabled for 2FA as well as if user has enabled it
kbwhizz
committed
Refining workflow so that there is a two stage process and user is only challenged for MFA if they have it enabled
kbwhizz
committed
Tidied up 2 stage login functionality
kbwhizz
committed
Adding tests for LoginPageMfa; fixing phpstan errors
kbwhizz
committed
Condensing use of findIdentifierBy function and changing refs from 2fa to mfa
kbwhizz
committed
Remove secret as parameter to create in UserServices
kbwhizz
committed
Remove 5th param from user create function as it is set in the fn itself
kbwhizz
committed
Disconnect genQRcode from need to use UserInterface
kbwhizz
committed
Call genQRcode from AccountEdit.php instead of User.php as it doesn't need to be used elsewhere
kbwhizz
committed
Fix service class name and add use to AccountEdit
kbwhizz
committed
Put user in to QrcodeService so it can access it.
kbwhizz
committed
Put cherillan lib in use too and send user obj from AccountEdit.
kbwhizz
committed
Correct userid getter and phpstan fixes
kbwhizz
committed
fixing qrcode declaration in edit-account html page
kbwhizz
committed
send secret as affirmed string
kbwhizz
committed
Code style fixes and space cleaning
kbwhizz
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Multi factor authentication using Google Authenticator - #5166

Multi factor authentication using Google Authenticator#5166
kbwhizz wants to merge 21 commits into
fisharebest:mainfrom
kbwhizz:2fa_v9

Commits on Jun 22, 2025

MFA authentication for webtrees. Integrates with setup, admin account user creation and user account editing to activate per account. Uses Google Authenticator.

Adding ability for site admin to switch 2fa on or off site-wide

Reinstate account update tests, removing secret defined value as parameter

remove old composer.lock

Removing old css image files no longer in wt

checking if site is enabled for 2FA as well as if user has enabled it

Refining workflow so that there is a two stage process and user is only challenged for MFA if they have it enabled

Tidied up 2 stage login functionality

Adding tests for LoginPageMfa; fixing phpstan errors

Condensing use of findIdentifierBy function and changing refs from 2fa to mfa

Remove secret as parameter to create in UserServices

Remove 5th param from user create function as it is set in the fn itself

Disconnect genQRcode from need to use UserInterface

Call genQRcode from AccountEdit.php instead of User.php as it doesn't need to be used elsewhere

Fix service class name and add use to AccountEdit

Put user in to QrcodeService so it can access it.

Put cherillan lib in use too and send user obj from AccountEdit.

Correct userid getter and phpstan fixes

fixing qrcode declaration in edit-account html page

send secret as affirmed string

Code style fixes and space cleaning