README

This package provides Google Authenticator functionality to your sites.

Documentation is pending.

Branch	Github Actions
master

Requirements

This fork is built for PHP 8.0+.

Installation using Composer

composer require mastersteelblade/google-authenticator

Usage

See example.php for how to use it.

The original Sonata web app is present in web/, pending an overhaul. Please make users.dat writeable for the webserver, or the secret can't be saved. Try to login with chregu/foobar.

What's missing in the example:

• Prevent replay attacks. A token should only be used once in order to prevent the risk of shoulder surfing.
• Show QR Code only when providing password again (or not at all)
• Regenerate secret on user request.

Feel free to submit PRs to improve this, or wait until I get around to it myself.

Support

Please use GitHub issues for support, as they're the easiest way to get in touch with me. Feel free to submit feature requests and bug reports, and I'll do what I can to implement them!

If you think you found a bug or you have a feature idea to propose, feel free to open an issue after looking at the contributing guide.

License

This package is available under the MIT license, and was originally forked from the seemingly abandoned Sonata Project fork.