jbroadway / elefant

Elefant, the refreshingly simple PHP CMS and web framework.
http://www.elefantcms.com
MIT License
208 stars 39 forks source link

2-factor authentication #328

Closed lux closed 1 year ago

lux commented 1 year ago

Adds 2-factor authentication against time-based one-time password sources, with an account setting added to specify whether all accounts require 2fa, admin accounts require it, or whether it's optional on an account-by-account basis.

Also adds a jQuery fix for a potential XSS vulnerability (https://github.com/jbroadway/elefant/security/dependabot/3).