This contribution allows to test that an enrollment that has been saved in the DB can be used to authenticate the user. The goal is to provide a test endpoint without having the full multi-factor authentication pipeline in place but once Tuleap has it, this test endpoint will be removed. To test, you first need to enroll yourself: go to the page /plugins/mfa/enroll, a base32 encoded value is displayed, it is the shared secret between the client and the server validating the TOTP codes. You can generate the TOTP code corresponding to the secret using the CLI tool oathtool (any other tool will work too) this way: oathtool --totp -b <secret> After the enrollment, you can access the page /plugins/mfa/enroll/test. With the secret key you have saved, you can can generate a new code. This code should be recognized as valid. This is part of story #11649: protect my account with a TOTP code Change-Id: I66d6d7bec934c3fbb4cf0a359772b5f7b7d835e9

+271 −0

Author

Thomas Gerbet (tgerbet) 2018-09-07 23:05

Committer

Thomas Gerbet (tgerbet) 2018-09-10 09:04

Hash 7dbdfe5fe37cb79d910ec5d447188251f875f9f8

Parent 86df2e328b9a2cd16d41c94bf1e317ffed6d4abd

Reference git #tuleap/stable/7dbdfe5fe37cb79d910ec5d447188251f875f9f8