For two-factor authentication with security keys like Yubikey/Google Titan.

Processwire-TfaU2F

Security Key

A module to use FIDO U2F for 2 factor authentication. This is essentially most security keys be it a cheap Key-ID/Hypersecu or a fancy Yubikey. Its easy to setup just install the module then enable Tfa under your user profile. Enroll your key then next time you need to login you will be asked to use your key.

Note this is very much a proof of concept. it does work but I cant guarantee its reliability. its also sadly limited to 1x security key due to limitations in the Tfa class which only allows one Tfa method at a time. Would be awesome if it could handle multiple forms of Tfa and multiple of the same kind for redundancy.

The code is kind of messy. I had no PHP linter/code formatter to clean it up. But its functional currently. Using the Yubikey-U2F libary for PHP and the Google U2F-API which ironicly is needed for Chrome but Firefox dont need it.

The Yubikey Security Key Graphic was sourced from Pixabay https://pixabay.com/illustrations/google-secure-key-u2f-security-key-3598222/

Demo


Demo

Install and use modules at your own risk. Always have a site and database backup before installing new modules.

Twitter updates

  • This week ProcessWire 3.0.214 is on the dev branch. Relative to 3.0.213 this version has 16 new commits which include the addition of 3 new pull requests, 6 issue fixes, a new WireNumberTools utility class, and various other improvements. More
    17 March 2023
  • ProcessWire 3.0.213 core updates: This week we’ll look at the new WireSitemapXML module, a new WireNumberTools core class, and a new ability for Fieldtype modules to specify useful ready-to-use configurations when creating new fields. More
    24 February 2023
  • ProcessWire 3.0.212 core updates— More
    17 February 2023

Latest news

  • ProcessWire Weekly #463
    In the 463rd issue of ProcessWire Weekly brings we'll check out the latest weekly update from Ryan, some weekly forum and online highlights, and more. Read on!
    Weekly.pw / 26 March 2023
  • ProcessWire 3.0.213 core updates
    This week we’ll look at the new WireSitemapXML module, a new WireNumberTools core class, and a new ability for Fieldtype modules to specify useful ready-to-use configurations when creating new fields.
    Blog / 24 February 2023
  • Subscribe to weekly ProcessWire news

“…building with ProcessWire was a breeze, I really love all the flexibility the system provides. I can’t imagine using any other CMS in the future.” —Thomas Aull