Download the PHP package netgen/ibexa-2fa-bundle without Composer
On this page you can find all versions of the php package netgen/ibexa-2fa-bundle. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download netgen/ibexa-2fa-bundle
More information about netgen/ibexa-2fa-bundle
Files in netgen/ibexa-2fa-bundle
Package ibexa-2fa-bundle
Short Description Netgen ibexa 2FA Bundle is an ibexa bundle that provides two-factor authentication for your ezplatform project
License MIT
Homepage https://github.com/netgen/NovaIbexa2FABundle
Informations about the package ibexa-2fa-bundle
Netgen Ibexa 2FA Bundle
This bundle is in the alpha stage and is not recommended for production use.
This repository is forked from Novactive/NovaeZ2FABundle and upgraded to work with Ibexa 4.x
Netgen Ibexa 2FA Bundle provides two-factor authentication for your ibexa project.
Installation
Requirements
- Ibexa 4.x
- PHP 8.1
Use Composer
Add the lib to your composer.json, run composer require netgen/ibexa2fabundle
to refresh dependencies.
Register the bundle
Then inject the bundle in the config\bundles.php
of your application.
Add routes
Make sure you add this route to your routing:
Update Configuration
Add new configuration
The values can be updated according to the project specification
If email method is enabled then MAILER_DSN env variable should be specified in the .env file
For full scheb_two_factor reference visit the following resource: https://github.com/scheb/2fa/blob/6.x/doc/configuration.rst
Note to keep in mind: This bundle is Siteaccess aware so each Siteaccess can have different authentication method.
Create the table in DB:
See the file bundle/Resources/sql/schema.sql
Especial instructions for HTTP Cache
Important!: For the HTTP Cache system (e.g. Varnish or Fastly) the following logic should be implemented:
and it should be added before the call ez_user_context_hash
line.
We need it in order to avoid triggering the X User Hash mechanism when /2fa request is sent, so the /_fos_user_context_hash
request would not return 302 redirect response because of this bundle.
Manually removing 2FA record for specific User:
If some User needs its 2FA record in the database removed to be able to login without entering 2FA code run the following command acx:users:remove-2fa
with specifying user's login:
Note to keep in mind: If you have the 2FA already set up for the user and you're going to reset it by following the corresponding link on the 2FA Setup page don't change the method for the current Siteaccess before that! Because in this case the secret key will be supposed to be removed for the new method not for the old one and hence the reset won't work!
All versions of ibexa-2fa-bundle with dependencies
scheb/2fa-bundle Version ^5.13
scheb/2fa-google-authenticator Version ^5.13
scheb/2fa-totp Version ^5.13
scheb/2fa-trusted-device Version ^5.13
scheb/2fa-backup-code Version ^5.13
scheb/2fa-email Version ^5.13
bacon/bacon-qr-code Version ^2.0