search

e107inc / twofactorauth

Two-Factor Authenthication (2FA) for e107
2 stars 2 forks source link

Backup code #6

Closed parsfounder closed 1 month ago

parsfounder commented 2 years ago

Recovery code is missing! is that ok to use this plugin on a live website?

Moc commented 2 years ago

Correct, the library that this plugin uses (https://github.com/RobThree/TwoFactorAuth) does not support recovery codes. Such functionality will thus not be implemented.

An administrator can always disable 2FA on any user account. Ultimately, if regular access to the Admin Area is not possible, the website administrator can also directly access the database in case of emergency to disable 2FA for specific users. I'll post instructions on how to do so in the documentation.

Keeping the issue open until documentation has been added.

Moc commented 1 month ago

I decided to implement a recovery code functionality anyway. Will be included in the next release (2.0.0).

Leaving this issue open until the flood protection element is added as well.

Moc commented 1 month ago

This is now completed. Should all be working but let me know if there's any issues.