Skip to content

1.1.0 => Master - 2FA Integration

Administrator requested to merge 1.1.0 into master
  • Added CSRF token checking to login.inc.php. This was missing.
  • Added ids to login.php inputs
  • Changed all of the Location headers in the login.inc.php to be returns for ajax.
  • Added the Google Authenticator package
  • Added the Google Authenticator url to the meta tag
  • Added login.js for all the login js bits
  • Added 2fa.inc.php for the 2fa bits
  • Reconfigured the login.inc.php page to fully work via AJAX and check for 2FA settings.
  • mysqldump of new changes added.
  • Changes noted in the update bash file
  • Admin page now shows larger tables better
  • Admin page now has an authentication section for toggling 2FA globally.
  • All swipe card code has been commented out as this is likely not going to be used. Can be removed later.
  • Fixed the success message on the addlocaluser page
  • Profile page now allows users to toggle 2FA except for the root user. This is actioned by admin.inc.php
  • Profile page allows you to reset your 2FA.
  • Admin users table now has a reset 2FA option for resetting other users' 2FA
  • Root user can no longer have 2FA prompts.
  • 2FA prompts now submit on enter key.
  • 2FA can now be "remembered" so you only have to input it once every 30 days on a device
  • Resetting a local user password will clear all "remembered" 2FAs for the user

Merge request reports