search

mitro-co / mitro

Repository for all Mitro client & server code
GNU General Public License v3.0
1.64k stars 242 forks source link

Chrome: Can't connect to my account, always request to check verification email #107

Closed shulard closed 9 years ago

shulard commented 9 years ago

Hello,

I've installed the mitro extension on Chrome Canary but I can't get to my account. I try to connect, then I received the verification email. I click on the link, it say that device is verified and I request me to connect again.

The 2 factor authentication process start, I enter the code but I see the given message :

screenshot

After that I do not receive any email, I think that extension is in sort of blocked mode...

shulard commented 9 years ago

I've the same in the standard Chrome too...

winstonhong commented 9 years ago

Hello shulard.

The 2 factor authentication is NOT activated by dedault.

shulard commented 9 years ago

Hello,

I know that 2 factor authentication is not enabled by default. When I created my account, I have the possibility to enable it and it request me to install the Google Authenticator application.

Then I linked my account with that authenticator...

But with an active account, I don't know how to update this kind of preference...

MichaelFlinterman commented 9 years ago

Does this extension interacts with the mitro.co backend or have you setup your own environment to connect with?

winstonhong commented 9 years ago

Hello roeler.

Thank you very much for your reply.

I have enabled two-factor authentication of Mitro. However, I can use username and password to login Mitro directly without any popup information on 6-digits two-factor authentication code.

Would you please shed me some light on how to make 6-digits two-factor authentication code show up if you have some ideas?

Thank you very much.

vijayp commented 9 years ago

Stephane, you can edit tfa prefs by clicking on the mitro button in the browser, then the gear the "two factor auth preferences".

Winston, in order to update tfa preferences, your extension must provide a signed token with nonce to the server which will validate this and then generate a 2fa prefs page. If you have not implemented that correctly, then it will not work. Vijay

On Wednesday, February 25, 2015, winstonhong notifications@github.com wrote:

Hello roeler.

Thank you very much for your reply.

(1) This extension does NOT interact with the mitro.co backend.

(2) Instead, I setup our own environment to connect with the extension.

our config file for "external server"

browser-ext/login/common/config/config.release.js

var debugMode = false; var MITRO_HOST = '192.168.108.147'; var MITRO_PORT = 8443; var MITRO_AGENT_HOST = '192.168.108.147'; var MITRO_AGENT_PORT = 8443; var FAILOVER_MITRO_HOST = null; var FAILOVER_MITRO_PORT = null; var FIREFOX; var CHROME; var SAFARI;

var WEBPAGE;

This extension is generated by "make release" (or "make firefox") instead of "make chrome-debug" (or "make firefox-debug").

https://192.168.108.147:8443/mitro-core/api/BuildMetadata commit: 8c374fa https://github.com/mitro-co/mitro/commit/8c374fadf8f40879ce1abcfcf15109dc61e28811 describe: fatal: No names found, cannot describe anything. build time: 2015-02-16T20:18:34Z

(3) Even I use chrome and firefox download the extension from

https://www.mitro.co/

My Chrome and Firefox browser still can NOT enable two-factor authentication (TFA) , no matter in SignUp or SignIn webpage.

(4) I can not fix out how to enable two-factor authentication (TFA) , no matter the extension built by myself or downloaded from mitro,co website

Would you please shed me some light on how to enable two-factor authentication (TFA) ? Thank you very much.

The source code of two-factor authentication (TFA) is shown in the following link.

https://github.com/mitro-co/mitro/tree/master/mitro-core/java/server/src/co/mitro/twofactor

https://github.com/mitro-co/mitro/tree/master/mitro-core/java/server/src/co/mitro/twofactor

— Reply to this email directly or view it on GitHub https://github.com/mitro-co/mitro/issues/107#issuecomment-75903359.

winstonhong commented 9 years ago

Hello vijayp.

Thank you very much for your guidance.

After I enable 2FA in the 1st device Windows7/Firefox, I fail to login the two new devices Ubuntu14.04/Firefox or Ubuntu14.04/Chrome installed in other physical machine.

Then I disable 2FA in the 1st device Windows7/Firefox, I can login both new devices Ubuntu14.04/Firefox and Ubuntu14.04/Chrome installed in other physical machine.

Hello shulard.

I confirm your issue.

I solve your issue by disabling 2FA in the 1st device Windows7/Firefox.

After I disable 2FA, I can login any new device successfully.

shulard commented 9 years ago

Hello,

Thanks for your answers, I confirm that disabling 2FA, solve my issue !

Thanks