Commit grafiek

50 Commits

Auteur SHA1 Bericht Datum
Daniel Seifert b9db9e601d
adjust mockable function calls, make compatible to same class extensions from Webauthn plugin 2022-12-07 12:06:24 +01:00
Daniel Seifert b18196613e
set current user to use it before session reload 2022-11-30 22:33:43 +01:00
Daniel Seifert 0dc6c49e0b
fix missing redirect on lost session while admin login 2022-11-26 00:23:04 +01:00
Daniel Seifert f14ce58d6e
improve code syntax 2022-11-25 20:24:09 +01:00
Daniel Seifert 7a2648fe7b
improve code 2022-11-25 15:42:33 +01:00
Daniel Seifert a3c75df635
adjust tests 2022-11-25 09:49:31 +01:00
Daniel Seifert a809c04b5b
set selected language for otp form 2022-11-24 20:27:07 +01:00
Daniel Seifert 77eca02079
change session admin auth variable to constant 2022-11-24 20:17:50 +01:00
Daniel Seifert c86984df5f
move OTP check from login controller check to onAdminLoginEvent for webauthn compatibility 2022-11-24 00:51:56 +01:00
Daniel Seifert 46ae7efa32
separate session var names between frontend and backend 2022-11-23 21:48:34 +01:00
Daniel Seifert d7912f6371
prevent type error 2022-11-14 09:07:34 +01:00
Daniel Seifert 4edfa2d3c3
use separated input fields for totp code in front- and backend 2022-11-14 08:55:37 +01:00
Daniel Seifert 12bb6355ee
fix unthrown invalid totp exception 2022-11-14 00:24:04 +01:00
Daniel Seifert e65c2e7acb
add missing tests 2022-11-12 22:31:19 +01:00
Daniel Seifert 3327fc9242
adjust tests 2022-11-11 23:57:29 +01:00
Daniel Seifert 02f2f6a843
fix handle session variables
* attempted login user id will stored in session while totp request only
* successful totp login stores user id in totp auth session variable
2022-11-10 11:34:05 +01:00
Daniel Seifert e3d2156d44
extract TOTP check from admin login 2022-11-10 00:55:19 +01:00
Daniel Seifert c80b5f626f
rename module methods in extended OXID classes to prevent conflicts with other modules, move totp check to _afterLogin for webauthn module compatibility 2022-11-09 12:03:16 +01:00
Daniel Seifert f110142474
rename module methods in extended OXID classes to prevent conflicts with other modules 2022-11-09 11:27:11 +01:00
Daniel Seifert 4691b7d0c0
move TOTP check to deeper implemented login method, remove possible login vulnerability 2022-11-09 10:18:31 +01:00
Daniel Seifert 4e8bae08e7
fix small code issues 2022-10-01 22:02:42 +02:00
Daniel Seifert ecb8b61923
apply PHP-CS-Fixer rule sets 2022-09-30 21:06:30 +02:00
Daniel Seifert f0275c1bc9
add missing tests 2022-09-30 00:17:36 +02:00
Daniel Seifert 9c4e7cfcc3
refactor tests 2022-09-28 21:31:53 +02:00
Daniel Seifert 8b63d67a78
adjust license informations 2022-09-26 15:22:26 +02:00
Tobias Matthaiou d3576c2dd7 Require administrators to activate 2FA. 2022-09-13 17:06:27 +02:00
Daniel Seifert e1f5372f6b change docblocks 2019-08-14 23:23:36 +02:00
Daniel Seifert c77f6fa9e2 change and add tests 2019-08-11 00:33:59 +02:00
Daniel Seifert 2ffb5a4d73 add phpunit configuration for coverage report, mark uncovered lines 2019-08-09 23:10:04 +02:00
Daniel Seifert fb863773ca add missing tests 2019-08-08 23:50:09 +02:00
Daniel Seifert ed9c6dabb5 add test for backend login controller 2019-08-07 23:51:48 +02:00
Daniel Seifert 27eaf777a5 add tests for compoment extension 2019-08-07 00:15:54 +02:00
Daniel Seifert 9e15477737 prevent empty page at logout, clear error messages after displaying it 2019-08-03 23:56:44 +02:00
Daniel Seifert cea9e246ba initial implementation for frontend account area 2019-08-02 23:58:20 +02:00
Daniel Seifert 6731246784 initial implementation for frontend check 2019-08-02 00:23:21 +02:00
Daniel Seifert d6d1f976dc initial implementation for frontend check 2019-07-31 22:43:34 +02:00
Daniel Seifert 1ed760f8e4 add available backup code message in backend and in login form 2019-07-28 23:34:39 +02:00
Daniel Seifert 2e9fca06c0 allow backup codes fot TOTP login 2019-07-28 00:07:16 +02:00
Daniel Seifert 1cea1512d2 cleanup module 2018-10-23 22:35:44 +02:00
Daniel Seifert 73a5306d12 change newlines 2018-10-23 21:50:43 +02:00
Daniel Seifert 58fb0cb803 use confkey for encrypting instead of fragile user password 2018-10-22 12:10:43 +02:00
Daniel Seifert 12294725bc add global disable variable 2018-10-21 20:54:58 +02:00
Daniel Seifert 644ceaeca3 add cancel login action to login dialog, add translations 2018-10-20 23:20:23 +02:00
Daniel Seifert 57de2aabce make connector compatible 2018-10-20 00:45:49 +02:00
Daniel Seifert 2f196aaef7 integrate backend, save encrypted seed only 2018-10-19 14:16:37 +02:00
Daniel Seifert ad2085c603 make compatible to TOTP library v0.9, save password for decoding the seed 2018-10-19 00:32:59 +02:00
Daniel Seifert 0a528f993b implement OTP check, add exception 2018-10-18 15:33:59 +02:00
Daniel Seifert d8cd285342 extend login form 2018-10-17 16:21:49 +02:00
Daniel Seifert cecfa24161 basic implementation 2018-10-17 15:46:55 +02:00
Daniel Seifert 6f18d120c6 add basic module structure 2018-10-17 12:50:10 +02:00