For two-factor authentication with security keys like Yubikey/Google Titan.

Processwire-TfaU2F

Security Key

A module to use FIDO U2F for 2 factor authentication. This is essentially most security keys be it a cheap Key-ID/Hypersecu or a fancy Yubikey. Its easy to setup just install the module then enable Tfa under your user profile. Enroll your key then next time you need to login you will be asked to use your key.

Note this is very much a proof of concept. it does work but I cant guarantee its reliability. its also sadly limited to 1x security key due to limitations in the Tfa class which only allows one Tfa method at a time. Would be awesome if it could handle multiple forms of Tfa and multiple of the same kind for redundancy.

The code is kind of messy. I had no PHP linter/code formatter to clean it up. But its functional currently. Using the Yubikey-U2F libary for PHP and the Google U2F-API which ironicly is needed for Chrome but Firefox dont need it.

The Yubikey Security Key Graphic was sourced from Pixabay https://pixabay.com/illustrations/google-secure-key-u2f-security-key-3598222/

Demo


Demo

Install and use modules at your own risk. Always have a site and database backup before installing new modules.

Twitter updates

  • Today a new version of FormBuilder has been released in the FormBuilder support board (our 50th version) and it has a lot of interesting new features, which we’ll take a closer look at in this post— More
    11 June 2021
  • ProcessWire 3.0.179 adds great new admin theme customization tools that put you in full control over the Uikit admin styles— More
    28 May 2021
  • ProcessWire updates for week of 21 May 2021— More
    22 May 2021

Latest news

  • ProcessWire Weekly #370
    In the 370th issue of ProcessWire Weekly we're going to check out the latest version of the commercial FormBuilder module, introduce a couple of brand new third party modules, and more. Read on!
    Weekly.pw / 12 June 2021
  • ProcessWire FormBuilder v50 updates
    Today a new version of FormBuilder has been released in the FormBuilder support board (our 50th version) and it has a lot of interesting new features, which we'll take a closer look at in this post.
    Blog / 11 June 2021
  • Subscribe to weekly ProcessWire news

“Indeed, if ProcessWire can be considered as a CMS in its own right, it also offers all the advantages of a CMF (Content Management Framework). Unlike other solutions, the programmer is not forced to follow the proposed model and can integrate his/her ways of doing things.” —Guy Verville, Spiria Digital Inc.