PW 3.0.159 – Core updates

[ryan]

Finally, a blog post this time ? — ProcessWire 3.0.159 brings some useful and time-saving upgrades to the core two-factor authentication system:

https://processwire.com/blog/posts/pw-3.0.159/

[Robin S]

Thanks for the update @ryan!

Could you please take a look at what might be causing the main download button for the dev version to be stuck on 3.0.153? It's been this way for several weeks. I know that the button always links to the current state of the dev branch but it's potentially confusing to users having the version number out of sync like this. Thanks ?

[Jonathan Lahijani]

In terms of making the core smaller, can the old admin system (ie, the contents of /wire/templates-admin/ I believe it is) be done away with?  The admin that looks like this: https://i.ytimg.com/vi/eq-9GQCT0lw/maxresdefault.jpg

[asbjorn]

It seems to be an issue with the RSS feed for the ProcessWire blog at https://processwire.com/blog/rss/ , which has not been updated since the 3.0.154 / 3.0.155 post in late April.

[AndZyk]

Thank you for this update. ?

The "Remember this computer?" function is really handy for someone like me, who logs in daily into 10+ websites. Password managers like 1Password make this easy, but you always have to make an extra click.

I would support adding the TFA modules to the core, because in my opinion there are an essential security feature and I always install the TfaTotp module on every new website.

I have noticed a small bug: If you have the TFA reminder enabled for superusers in the ProcessLogin module and remember this computer, the notification is displayed, even if you already have TFA enabled.

Regards, Andreas

[AndZyk]

Hello,

I get with the latest version 3.0.162 dev and the module TfaTotp 0.4 the exception "Invalid base32 string" on our web hoster after the login attempt. On my local Mac it works like before.

Has anybody else this issue? I don't think the web hoster changed something.

Also the TFA reminder for superusers is still visible, even though it should be fixed with one of the latest commits. ?

Regards, Andreas

[horst]

Don't know this feature, but whats about:

different PHP versions local and online? (or: different PHP extensions local and online?, that may be invoked by processing a base32 string.)

[AndZyk]

Ah maybe this could be it. I found out that it is neither an issue with the latest ProcessWire version nor the TfaTotp module.

The Error occurs when I activate TfaTotp locally first (PHP 7.4) and import the database on our web hoster (PHP 7.3).

If I activate TfaTotp on our web hoster first and then import the database locally, then there is no error.

I don't know what changed because the first way always worked for me. ?