mirror of
https://github.com/Part-DB/Part-DB-server.git
synced 2025-07-31 00:04:40 +02:00
Added 2FA with U2F keys.
This commit is contained in:
parent
47fa8b04e5
commit
069293a843
18 changed files with 512 additions and 157 deletions
4
config/packages/r_u2f_two_factor.yaml
Normal file
4
config/packages/r_u2f_two_factor.yaml
Normal file
|
@ -0,0 +1,4 @@
|
|||
ru2_f_two_factor:
|
||||
formTemplate: "/security/U2F/u2f_login.html.twig"
|
||||
registerTemplate: "/security/U2F/u2f_register.html.twig"
|
||||
authCodeParameter: _auth_code
|
|
@ -50,4 +50,7 @@ security:
|
|||
# This makes the logout route available during two-factor authentication, allows the user to cancel
|
||||
- { path: ^/logout, role: IS_AUTHENTICATED_ANONYMOUSLY }
|
||||
# This ensures that the form can only be accessed when two-factor authentication is in progress
|
||||
- { path: ^/2fa, role: IS_AUTHENTICATED_2FA_IN_PROGRESS }
|
||||
- { path: "^/\\w{2}/2fa", role: IS_AUTHENTICATED_2FA_IN_PROGRESS }
|
||||
# We get into trouble with the U2F authentication, if the calls to the trees trigger an 2FA login
|
||||
# This settings should not do much harm, because a read only access to show available data structures is not really critical
|
||||
- { path: "^/\\w{2}/tree", role: IS_AUTHENTICATED_ANONYMOUSLY }
|
||||
|
|
|
@ -5,3 +5,7 @@
|
|||
|
||||
2fa_login_check:
|
||||
path: /{_locale}/2fa_check
|
||||
|
||||
r_u2f_register:
|
||||
resource: "@RU2FTwoFactorBundle/Resources/config/routing.yml"
|
||||
prefix: /{_locale}/user
|
Loading…
Add table
Add a link
Reference in a new issue