GoogleAuthenticatorX

Add 2 Factor Authentication to MODX manager login & front end login via pre-hook for "Login" extra.

2-factor authentications secures login by adding an extra authentication field "Authentication key" AKA one-time password. Even if user credentials are exposed in any way, the authentication is still protected by the one-time password which is changed every 30 seconds.

• Install a QR-code reader & Google Authenticator on your mobile device.
• @MODX manager: Open your user page, GoogleAuthenticatorX tab, and click "Show Secret".
• Add account in your Google Authenticator mobile application by scanning the QR-code.
• Go to System settings, "GoogleAuthenticatorX" namespace, change "Disable 2-factor authentication" to "No"
• NB. If you run to any issues and cannot login, just modify System_Settings DB table, change "gax_disabled" to 1

Changelog file for GoogleAuthenticatorX ModX extra.

• Use class based processors

• [#20][#23] Fixed PHP Warnings

• Fixed setup migration issue

• Replace deprecated mcrypt with OpenSSL
• Fixed issue causing 2FA secrets reset upon MODx upgrade
• Code enhancements

• Fixed legacy package data migration

• Enhanced GAxUserQRcode snippet

• Added "Login" extra integration hook

• Fixed corrupted transport package

• [#12] Fixed user "Extended fields" data loss on "secret reset"
• [#14] Fixed sending email to users during installation i8n issue
• [#13] Changed encryption cipher
• [#9][#11] Allow change of QR-code "issuer" value

• [#1] Added setup-options (enable 2-step verification + email instructions to users with manager access)
• Users' emails now are sent with each user manager language.
• More detailed instructions email to users.
• [#5] Fixed hardcoded login form strings.
• [#10] Fixed double slashes in URI

• Public availability

• Added feature: Users courtesy log-in
• Added feature: Allow users QR-code in manager profile
• Added feature: Send Instructions email to users
• Added feature: Send QR-Code by email

• Fixed issue: Avoid Google Authenticator account conflict
• Fixed issue: Changing status with lexicon
• Better logging

• Multi language support

• Added users tab
• Data are stored encrypted.

• Initial commit (Basic functionality)