[nodebb-plugin-2factor] Two-Factor Authentication
-
brazzerstop@community.nodebb.organtwortete auf julian@community.nodebb.org am zuletzt editiert von
@julian this is amazing feature!!! Thank you!
-
razielkanos@community.nodebb.organtwortete auf julian@community.nodebb.org am zuletzt editiert von
when i try to add a hardware key i instantly get the message "hardware key registration abborted" and in the logs i found this:
2023-11-20T06:03:39.301Z [4567/995] - info: [plugin/2factor] Denying socket access for uid 2 pending second factor.Any idea how I can fix this?
-
julian@community.nodebb.organtwortete auf julian@community.nodebb.org am zuletzt editiert von
Hmm, that actually sounds like a bug. Can you let me know your NodeBB version and 2factor plugin version?
I'll try to take a look tomorrow
-
razielkanos@community.nodebb.organtwortete auf julian@community.nodebb.org am zuletzt editiert von
2-factor is: 7.4.0
Board is: v3.5.1. -
razielkanos@community.nodebb.organtwortete auf julian@community.nodebb.org am zuletzt editiert von
I also noticed that the 2fa isn't working for me too.
I generate the first code to test the application, that works, but when i want to log in later, it doesn't recognize the code, and i have to use a backup code -
julian@community.nodebb.organtwortete auf julian@community.nodebb.org am zuletzt editiert von
@RazielKanos I just tested v7.4.0 against latest
develop
and there are no issues with registering 2FA.Just to be sure I also waited until the code rolled over to a new set and that also worked. Any errors on the backend?
Could it be your server clock is out of sync? If it is too far out, then the code it is expecting will not match your code.
-
darkpollo@community.nodebb.organtwortete an julian@community.nodebb.org zuletzt editiert von
Is it possible to have 2fa by email?
-
phenomlab@community.nodebb.organtwortete an darkpollo@community.nodebb.org zuletzt editiert von
@darkpollo that I my view defeats in entire purpose of 2fa. If your email was hacked, they'd also have the two factor which is what your are looking to secure in the first place.
-
julian@community.nodebb.organtwortete an phenomlab@community.nodebb.org zuletzt editiert von julian@community.nodebb.org
@phenomlab @darkpollo agreed. If there's a need for it it'd be a good separate plugin, same for a "magic link" style login plugin.