Extension talk:OATHAuth

No idea what to, but they sound way too similar.

It seems that the current distribution of mediawiki 1.35.1 is not coming with all the required dependencies for OATHAuth (e.g. the jakobo/hotp..... library) so I had to run the suggested composer command line and everything is working now (even though I did not install OATHAuth from github). So something needs to be fixed: either the plugin installation instructions or the distribution of mediawiki...

This is indeed strange. It should be there I believe. Probably a good idea to also report this on Phabricator.

Hi,

I have enabled OATHAuth extension in LocalSettings.php:

wfLoadExtension( 'OATHAuth' );

and performed a database update via Terminal:

php update.php

Then I enabled myself in LocalSettings.php (exchanged 'user' with my user name from my wiki):

$wgGroupPermissions['user']['oathauth-enable'] = true;

When calling "Special:OATHAuth" and clicking on the "Enable" button, the following error message appears:

[X2MsOumlHK6x4ODKTKpdfgAAAA8] /index.php?title=Spezial:Manage_Two-factor_authentication&action=enable&module=totp&warn=1 Error from line 66 of /www/htdocs/w00997ce/hvg-wiki-2020-03/extensions/OATHAuth/src/Key/TOTPKey.php: Class 'Base32\Base32' not found

Does anybody have an idea what went wrong?

Have I missed something in configuration?

Many thanks!

you might be missing a dependency, try running the suggested 'composer' command line

I´m using the extension since mediawiki 1.32 and updated it successfully to 1.33.

Today´s update to mediawiki 1.34 crashes mediawiki with fatal error after login (password) of user when token should be requested.

When OATHAuth is not enabled in localsettings.php, mediawiki works without 2FA.

Did you also update the code of this extension to the version meant to be used with MW 1.34.x?

Quote: "This extension comes with MediaWiki 1.31 and above. Thus you do not have to download it again. However, you still need to follow the other instructions provided." I´m using the file comming with the tar.gz file from mediawiki 1.34

Timestamp of all extension files is 19.12.2019 14:48:40

I had the same problem. I'm installig MediaWiki from repository and did not run the composer in the OATHAuth's directory So the library jakobo/hotp-php was missing...

Hi,

What is the correct syntax for $wgOATHExclusiveRights ? I want to revoke sysop right for deleteperm. Should i type something like this ? false or true ? I think adding one example would help users to understand better. :)

$wgOATHExclusiveRight['sysop']['deleteperm'] = false;

Or should i just type : $wgOATHExclusiveRight['sysop']= true;

And will it revoke all sysop rights until they activate 2FA ?

thanks,

I'm wondering about the same, nothing seems to work. I dug into CheckExclusiveRights.php and i'm still confused.

Hello

I have Version 3.0.1 of Bluespice MediaWiki.

I dont have permission to open the Site Special:OATHAuth

In my LocalSettings i have this command: $wgGroupPermissions['user']['oathauth-enable'] = true;

E-Mail is not confirmed.?

Thanks

I installed the extension and updated the database. It showed in the Special:Version. However, the page "Special:Oath" did not appear in the special pages.

When I accessed it manually I found it and was able to set the authentication up properly. However, even after authentication, the "Special:Oath" page did not show up.

How can I show the page?

Thanks

It's linked from user preferences, not special pages.

Hello, is there any way (or planned) to require two-factor using the extension?

Not at the moment but probably soon. See T150562.

There's any way to prevent an user to disable the two factor authentication?

Not at the moment but probably soon. See T150562.

I just stumbled on this: https://github.com/wikimedia/mediawiki-extensions-GoogleAuthenticator - seems pretty new (no extension page though). I wonder how it compares?