2FA authentification

[nferrara]

Hello,

I'd like to add two-factor authentication to my Dadabik site. After consulting the manual (below), I found some information I don't fully understand. Is there a supplementary manual?

I'm already familiar with and use two-factor authentication with WordPress; it works fine: on one side, the Wordfence module is activated on the server, and on the other side, on my phone, the Google Authenticator app generates codes that I use for WordPress login.

In the specific context of Dadabik, how do I do this?
How do I configure it using all these terms from the manual: "API of qrsever.com", "$two_factor_auth_app_name) and the TOTP secret", "config parameters $encryption_key and $two_factor_auth_app_name", "parameter $show_2fa_secret_code_text"?
Is there a more detailed manual?
Sincerely
---------------current manual----------------------------
To generate the QR Code, the API of qrsever.com is used. When the QR Code is generated, the following information are sent to qrsever.com: the username of the user, the name of the app ($two_factor_auth_app_name) and the TOTP secret. Being an HTTP(s) call, other information (for example your IP address, your browser, your OS) could be potentially stored by qrsever.com.

Before starting to use 2FA, you need to set the config parameters $encryption_key and $two_factor_auth_app_name.

The config parameter $show_2fa_secret_code_text allows to set wheather to display the secret key as text in addition to the QR code during the user's first login. By default, this is set to 0 (disabled).

If you use HTTP API calls to login, you can still authenticate with uesrname+password only, even if 2FA is enabled for the user.
----------------current manual------------------------

 

[deep64blue]

Before starting to use 2FA, you need to set the config parameters $encryption_key and $two_factor_auth_app_name.

This should be all you need to configure in your config_custom.php file.

 

[nferrara]

Thank you, but what values should I enter in these two parameters (I'm using Google Authenticator)?
Nicole

 

[deep64blue]

What values should I enter in these two parameters

This is covered in the config.php hints

// If you use Two-Factor authentication, set the name of your app as you want to be displayed in the Authenticator app
$two_factor_auth_app_name = '';

// If you use Two-Factor authentication, TOTP secrets are stored in the database, encrypted. Set an encryption key.
// The easiest way to create a solid encryption key is to run locally the script gen_encryption_key.php
$encryption_key = '';