psecio / gatekeeper

Gatekeeper: An Authentication & Authorization Library
367 stars 23 forks source link

Finish auth token handling #8

Open enygma opened 9 years ago

enygma commented 9 years ago

There's a bit of functionality already in the system to support two-factor authentication tokens, but it needs to be finished out. This includes:

This could be in multiple places too...maybe a method on the UserModel that takes in an abstract token instance and runs the matching verifier based on the current configuration. This will need some way to get values from the current configuration (like Gatekeeper::getConfig) for things like secret keys or API credentials.

racknoris commented 8 years ago

I want to make sure: does what you say mean that in the auth_tokens table, the verifier column isn't used? What is the purpose of that column? added security?