Actions
Bug #104312
closed
TOTP MFA provider must support multiple devices
Status:
Closed
Priority:
Must have
Assignee:
-
Category:
Security
Target version:
-
Start date:
2024-07-05
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
11
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
It is insufficient to only allow registering a single TOTP device.
Best usecase: yubikeys. One should have more than one key (backup).
Therefore it must be possible to register multiple TOTP devices.
Updated by Markus Klein 12 months ago
ยท Edited
Possible workaround is to define a virtual service using the totp provider again:
Services.yaml
second-totp:
class: TYPO3\CMS\Core\Authentication\Mfa\Provider\TotpProvider
tags:
- name: mfa.provider
identifier: 'totp2'
title: 'TOTP (backup)'
description: 'LLL:EXT:core/Resources/Private/Language/locallang_mfa_provider.xlf:totp.description'
setupInstructions: 'LLL:EXT:core/Resources/Private/Language/locallang_mfa_provider.xlf:totp.setupInstructions'
icon: 'actions-qrcode'
defaultProviderAllowed: true
before: 'recovery-codes'
after: 'totp'
Updated by Georg Ringer 11 months ago
- Status changed from New to Closed
closing issue in favor of document how to fix it, cross post to github > https://github.com/TYPO3-Documentation/TYPO3CMS-Reference-CoreApi/issues/4648
Actions