<![CDATA[ GoogleAuthenticatorX: Add 2-step verification to MODX manager login. - My Forums]]> https://forums.modx.com/thread/?thread=92801 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-547950 Also use chrome "developer tools" and tell what network activities occur when you click "show secret". There should be a post to "assets/components/GoogleAuthenticatorX/connectors/connector.php" with the ID of the user (opened profile user), the response is JSON of all settings (secret, QRcode URI, status, etc.).

Be careful not to publish sensitive information!

I'm off to sleep, will check you response at morning.

Quote from: quantiumtech at Jan 11, 2017, 02:20 AM
Thanks very much for the quick response, Mina! Sorry, but I'm a total noob to MODX. What logs/where?
]]> mina_gerges Jan 11, 2017, 02:38 AM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-547950 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-547949 quantiumtech Jan 11, 2017, 02:20 AM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-547949 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-547946
Quote from: quantiumtech at Jan 11, 2017, 01:16 AM
I just tried to install this. Carefully followed directions (user is sudo) - clicked "Show Secret" -- nothing happened. Tried to email the barcode to myself. Tried to email the user to myself. No emails received. (Nothing in spam, either.) I became worried about getting locked out so I created a second admin user AND uninstalled this extra. Sure would like to be able to use it, though... Help?
]]> mina_gerges Jan 11, 2017, 01:21 AM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-547946 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-547945 quantiumtech Jan 11, 2017, 01:16 AM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-547945 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-518133 Cryptography is certainly a buzz in certain expanding circles right now. Integrating with Login would be excellent!]]> lokust Jan 08, 2015, 03:35 PM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-518133 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-518131
Currently it works only on the backend (manager), I was planning to extend it to front-end logging & integrate it with "Login" add-on, however unexpectedly the downloads are so few, and not much interactions]]> mina_gerges Jan 08, 2015, 03:14 PM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-518131 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-518124
I'd like to implement this on a forthcoming project where we may also extend this to web user accounts.

I've posted a comment to Github.]]> lokust Jan 08, 2015, 01:38 PM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-518124 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-507100 (Add 2-step verification to your modx manager) I thought that everyone will know what is that, but thanks to you, now I know that i should consider a firm documentation and a better explanations and how-to.

When I implemented this Extra I expect it to be a real bad-ass for MODX and a big security enhancement for it. But seems i need to know how to advertise it. I'm still awaiting for any bug reports (i know some of them already laugh) or enhancement ideas.]]> mina_gerges Aug 22, 2014, 03:55 PM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=3#dis-post-507100 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=2#dis-post-507096
We used something very similar to this back in the Dark Ages when I was in the US Navy. Every night just at midnight somebody in the cryptography room removed the day's punched card and replaced it with a new one. That card contained the code for generating the day's encryption keys. The whole business took up a whole small room - I've slept in smaller bedrooms. And now we do it with web apps and cell phones. I wonder what we'll be doing 40 years from now.]]> sottwell Aug 22, 2014, 03:34 PM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=2#dis-post-507096 <![CDATA[Re: GoogleAuthenticatorX: Add 2-step verification to MODX manager login.]]> https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=2#dis-post-507088 The more I work with this the more impressed I am. The login form is modified to add a field. Each user has extended fields added, and a new tab. A very professional job, and a good idea. Wow, smiley didn't expect this kind of review from an expert like you, thanks.

Well, phones nowadays are in everyone hands all the time, and they are used for every kind of purpose. Google Authenticator is supported natively on (iPhones, Android, and BlackBerry), if the end user doesn't have a smart phone then the admin should consider providing them with a hardware token (I personally worked only with virisign token not Google Authenticator compatible)

My father in law went to buy a phone recently of course he wanted a not-smart one, but he found all phones are smart OR the other options, was pensionaries phone with 1 line LCD screen and huge numerical sized buttons.

I don't like the extended fields, In next release there will be a custom table for security reasons. (issue already on github)

I've updated github wiki, and added screen-shots there, I need feedbacks for improvements, and i need a clear and well written end-users guide to explain how to install the mobile application and configure it.

I'm not saying this is full replacement of SSL, but makes MODX manager quite secure as long as the secret is kept only in DB and never stored anywhere else (beside the secured storage of the mobile device)]]> mina_gerges Aug 22, 2014, 02:38 PM https://forums.modx.com/thread/92801/googleauthenticatorx-add-2-step-verification-to-modx-manager-login?page=2#dis-post-507088