Improved authentication system with 2-step verification for Kirby CMS.

• 2-step verification
• Password reset (soon)
• Password-less login via email (soon)
• Custom login layout (soon)
• Your turn...

Once installed, Authenticator will automatically register the necessary users blueprint to activate the plugin. If your project already have a default users blueprint, you will need to add the field below to site/blueprints/users/default.yml:

fields:
  authenticator:
    type: authenticator

Then you can login, go to https://your-site.com/panel/users/[username]/edit, and scroll to the 2-step verification section. From there you can turn 2-step verification on/off by clicking on the button on the right and following the instructions.

This plugin is still in beta and there are some features that I'd like to complete. That doesn't mean it's buggy, all implemented features should work well. It just doesn't have all the features I have planned for it yet. I'd appreciate if you can test it and give feedback.

• Kirby 2.5+
• PHP 7.1+

Download the files and place them inside site/plugins/authenticator.

Kirby's command line interface makes installing the Authenticator plugin a breeze:

$ kirby plugin:install pedroborges/kirby-authenticator

Updating couldn't be any easier, simply run:

$ kirby plugin:update pedroborges/kirby-authenticator

You can add the Authenticator plugin as a Git submodule.

$ cd your/project/root
$ git submodule add https://github.com/pedroborges/kirby-authenticator.git site/plugins/authenticator
$ git submodule update --init --recursive
$ git commit -am "Add Authenticator plugin"

Updating is as easy as running a few commands.

$ cd your/project/root
$ git submodule foreach git checkout master
$ git submodule foreach git pull
$ git commit -am "Update submodules"
$ git submodule update --init --recursive

• [X] Create backup codes when activating 2-step verification
• [ ] Password reset
• [ ] Password-less login via email
• [ ] Separate login and 2-step verification in two screens
• [ ] Request verification code to change password
• [ ] Option to copy secret if QR code can't be scanned
• [ ] Allow admin to turn 2-step verification on/off for users
• [ ] Login with email/password instead of username/password
• [ ] Custom login layout

All notable changes to this project will be documented at: https://github.com/pedroborges/kirby-authenticator/blob/master/changelog.md

Authenticator plugin is open-sourced software licensed under the MIT license.

Copyright © 2018 Pedro Borges oi@pedroborg.es