collective.googleauthenticator 0.2.5

Case 1: Enabling the two-step verification

Pre-conditions: User is not logged into the Plone site, does not yet have two-step verification enabled and has installed the Google Authenticator app (including the advised bar code scanner) on his mobile device.

From any page follow the “Enable two-step verification” link in the menu (next to “Log out”).

That will bring you to a page on which a bar code is shown.

You’re supposed to scan the bar code shown on the page using the bar code scanner installed on your mobile device, which you’re going to use for verification.

After you have successfully scanned the bar code, enter the token shown in the “Enter the verification code to activate two-step verification” field for confirmation and press the “Verify” button.

Upon successful confirmation (you should see a message stating that) the two-step verification is enabled for your account.

Case 2: Two-step verification

Pre-conditions: User is not logged in and has enabled the two-step verification.

When you log into the Plone site (just using username and password), you would see an extra screen on which you are asked to provide the token, generated by Google Authenticator.

You should then open the Google Authenticator app on your mobile device and type in the token shown into the “Enter code” field.

If token is valid, you would be logged in.

Case 3: Lost tokens

Pre-conditions: User is not logged in, has enabled the two-step verification.

There might be cases when you have lost your token (either removed it from your app by accident or lost the mobile device). For such cases, you can reset the bar code.

Log into the Plone site (just using username and password), for to see the extra screen on which you are asked to provide the token, generated by Google Authenticator and follow the link (help text of the “Enter code” field). You would then land on the page where from you can request the bar code reset.

Enter your username in the “Username” field, press the “Submit” button. Link for resetting your bar code appear in your mailbox shortly. Having clicked on the link to reset the bar code, would bring your to a page where you can scan the bar-code same way you have done it when setting up the two-step verification.

Scan the code with your mobile device and enter the code in the “Enter the verification code to activate the two-step verification” field.

Upon successful confirmation (you should see a message stating that) your bar code is reset.

Case 4: Disabling the two-step verification

Pre-conditions: User is logged in and has enabled the two-step verification.

From any page follow the “Disable two-step verification” link in the menu (next to “Log out”).

After which you would get a message.

Buildout

>>> [instance]
>>> eggs +=
>>>     collective.googleauthenticator

>>> zcml +=
>>>     collective.googleauthenticator

ZMI

Secret Key

Site secret key - can be any string. See it as some sort of a password.

Globally enabled

If checked, two-step verification is globally force-enabled for all site users and they no longer have an option to disable it; this applies to all new users (just registered accounts) as well.

White-listed IP addresses

List of white-listed IP addresses - one at a line. If user comes from one of those, the two-step verification is skipped even if user has enabled it or two-step verification is globally enabled.

Extra

Additionals options of the control panel are:

• Enable two-step verification for all users.

• Disable two-step verification for all users.

0.2.5

20-06-2014

• Improved PAS plugin.

0.2.4

30-01-2014

• Minor fixes.

0.2.3

29-01-2014

• Making sure the URL to reset the bar-code in template is not escaped.

0.2.2

29-01-2014

• Send e-mail in “text/html” format for requst bar code reset template.

0.2.1

29-01-2014

• Fix typo in helpers.extract_ip_address_from_request (proxy related).

0.2

23-01-2014

• Now admins are able to force the two-step verification for all users (app control panel).

• Omit two-step verification for white-listed IP addresses (app control panel).

• Links to enable/disable two-step verification moved from “Personal preferences” page to Plone menu (next to “Log out”).

0.1.1

15-01-2014

• Fixes in manifest.

0.1

13-01-2014

• Initial release (no longer available on PyPI), with two-step verification, bar-code/token recover, basic app control panel.