For two-factor authentication with security keys like Yubikey/Google Titan.

Processwire-TfaU2F

Security Key

A module to use FIDO U2F for 2 factor authentication. This is essentially most security keys be it a cheap Key-ID/Hypersecu or a fancy Yubikey. Its easy to setup just install the module then enable Tfa under your user profile. Enroll your key then next time you need to login you will be asked to use your key.

Note this is very much a proof of concept. it does work but I cant guarantee its reliability. its also sadly limited to 1x security key due to limitations in the Tfa class which only allows one Tfa method at a time. Would be awesome if it could handle multiple forms of Tfa and multiple of the same kind for redundancy.

The code is kind of messy. I had no PHP linter/code formatter to clean it up. But its functional currently. Using the Yubikey-U2F libary for PHP and the Google U2F-API which ironicly is needed for Chrome but Firefox dont need it.

The Yubikey Security Key Graphic was sourced from Pixabay https://pixabay.com/illustrations/google-secure-key-u2f-security-key-3598222/

Demo


Demo

Install and use modules at your own risk. Always have a site and database backup before installing new modules.

Twitter updates

  • This week we focus in on a new and unique Inputfield module added to the core that enables a lot of useful new input capabilities for tags, sortable multiple selection and custom user input— More
    30 April 2021
  • With more than 25 commits, ProcessWire 3.0.176 resolves lots of minor issues, adds support for multiple randomly selected read-only database connections, upgrades the tag features in the Template editor, adds a useful new Tags Inputfield, and more… More
    23 April 2021
  • This week ProcessWire (3.0.175) gained the ability to maintain separate read-only and read-write database connections to optimize scalability, cost and performance. The post covers why this can be so valuable and how to configure it in ProcessWire— More
    2 April 2021

Latest news

  • ProcessWire Weekly #365
    In the 365th issue of ProcessWire Weekly we're going to check out the latest core updates, introduce a new third party module called FieldtypeOembed, and more. Read on!
    Weekly.pw / 9 May 2021
  • ProcessWire 3.0.177 core updates
    This week we focus in on a new and unique Inputfield module added to the core that enables a lot of useful new input capabilities for tags, sortable multiple selection and custom user input.
    Blog / 30 April 2021
  • Subscribe to weekly ProcessWire news

“Yesterday I sent the client a short documentation for their ProcessWire-powered website. Today all features already used with no questions. #cmsdoneright—Marc Hinse, Web designer/developer