sonata-project / google-authenticator
Library to integrate Google Authenticator into a PHP project
                                    Fund package maintenance!
                                                                            
                                                                                                                                        greg0ire
                                                                                    
                                                                            
                                                                                                                                        core23
                                                                                    
                                                                            
                                                                                                                                        OskarStark
                                                                                    
                                                                            
                                                                                                                                        VincentLanglet
                                                                                    
                                                                
Installs: 11 262 534
Dependents: 40
Suggesters: 10
Security: 0
Stars: 418
Watchers: 19
Forks: 195
Open Issues: 0
pkg:composer/sonata-project/google-authenticator
Requires
- php: ^7.3 || ^8.0
Requires (Dev)
- symfony/phpunit-bridge: ^5.1.8
README
Ported from http://code.google.com/p/google-authenticator/
You can use the Google Authenticator app from here http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=1066447 to generate One Time Passwords/Tokens and check them with this little PHP app (Of course, you can also create them with this).
| Branch | Github Actions | Coverage | 
|---|---|---|
| 2.x | ||
| 3.x | 
Installation using Composer
composer require sonata-project/google-authenticator
Usage
See example.php for how to use it.
There's a little web app showing how it works in web/, please make users.dat writeable for the webserver, doesn't really work otherwise (it can't save the secret). Try to login with chregu/foobar.
What's missing in the example:
- Prevent replay attacks. One token should only be used once
- Show QR Code only when providing password again (or not at all)
- Regenerate secret
Support
For general support and questions, please use StackOverflow.
If you think you found a bug or you have a feature idea to propose, feel free to open an issue after looking at the contributing guide.
License
This package is available under the MIT license.