RobThree/TwoFactorAuth
PHP library for Two Factor Authentication (TFA / 2FA)
📦 Improvements
- Removed curl_close to avoid deprecation warning on PHP 8.5 by @givanz in https://github.com/RobThree/TwoFactorAuth/pull/155
📋 What Else Has Changed
- Fix up readme by @dereuromark in https://github.com/RobThree/TwoFactorAuth/pull/149
- Restore company name in demo by @willpower232 in https://github.com/RobThree/TwoFactorAuth/pull/153
- Update workflows by @willpower232 in https://github.com/RobThree/TwoFactorAuth/pull/156
- doc: getting started: improve examples by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/154
✨ New Contributors
- @dereuromark made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/149
- @givanz made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/155
- Full Changelog: https://github.com/RobThree/TwoFactorAuth/compare/v3.0.2...v3.0.3
📋 What's Changed
- add support for endroid/qr-code (with logo) version 6 by @YellowMaker in https://github.com/RobThree/TwoFactorAuth/pull/143
✨ New Contributors
- @YellowMaker made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/143
- Full Changelog: https://github.com/RobThree/TwoFactorAuth/compare/v3.0.1...v3.0.2
📋 What's Changed
- remove warning about default external qr code provider in README.md by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/137
- add support for endroid/qr-code version 6 by @cliffordvickrey in https://github.com/RobThree/TwoFactorAuth/pull/140
✨ New Contributors
- @cliffordvickrey made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/140
- Full Changelog: https://github.com/RobThree/TwoFactorAuth/compare/v3.0.0...v3.0.1
📋 What's Changed
- delete files specific to code editors by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/120
- remove insecure rng providers by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/122
- add CI4-auth link in README. fix #107 by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/123
- add SensitiveParameter to sensitive arguments by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/119
- Changed default secret length from 80bits to 160bits as recommended by RFC4226 by @Mattie112 in https://github.com/RobThree/TwoFactorAuth/pull/117
- Bacon has multiple versions now by @willpower232 in https://github.com/RobThree/TwoFactorAuth/pull/124
- make QR Code Provider a mandatory constructor argument by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/125
- set verify ssl parameter for HTTP based QR provider to true by default by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/126
- + 6 more
📋 What's Changed
- Fix badges in README by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/102
- Add warning of default QR Code provider to README.md by @RMEngels in https://github.com/RobThree/TwoFactorAuth/pull/105
- code improvements, readability enhancements, type safety, modern syntax adaptation by @xHeaven in https://github.com/RobThree/TwoFactorAuth/pull/108
- Fix docs: Construct new TwoFactorAuth-class by @modelrailroader in https://github.com/RobThree/TwoFactorAuth/pull/110
- Fix issue #114 (Support for EndroidQR v5) by @Mattie112 in https://github.com/RobThree/TwoFactorAuth/pull/115
✨ New Contributors
- @RMEngels made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/105
- @xHeaven made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/108
- @modelrailroader made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/110
- @Mattie112 made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/115
- Full Changelog: https://github.com/RobThree/TwoFactorAuth/compare/v2.0.0...v2.1.0
📋 What's Changed
- Namespace mistake in docs by @thomascorthals in https://github.com/RobThree/TwoFactorAuth/pull/98
- Ensure composer dist archive contains only usefull files by @cedric-anne in https://github.com/RobThree/TwoFactorAuth/pull/101
- Move to PHP 8.1 minimum version, add typing by @NicolasCARPi in https://github.com/RobThree/TwoFactorAuth/pull/97
✨ New Contributors
- @thomascorthals made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/98
- @cedric-anne made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/101
- @NicolasCARPi made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/97
- Full Changelog: https://github.com/RobThree/TwoFactorAuth/compare/1.8.2...v2.0.0
Testing #101, full release to follow
📋 What's Changed
- Catch deprecations as part of test suite by @MasterOdin in https://github.com/RobThree/TwoFactorAuth/pull/85
- convert issuer to string prevents php 8.1 errors by @brainfoolong in https://github.com/RobThree/TwoFactorAuth/pull/83
- Test specific provider by @willpower232 in https://github.com/RobThree/TwoFactorAuth/pull/86
- Fix compatibility with endroid/qr-code 4 by @MasterOdin in https://github.com/RobThree/TwoFactorAuth/pull/84
✨ New Contributors
- @brainfoolong made their first contribution in https://github.com/RobThree/TwoFactorAuth/pull/83
- Full Changelog: https://github.com/RobThree/TwoFactorAuth/compare/1.8.1...1.8.2
📋 Changes
- Added GoogleChartsQrCodeProvider (#79)
📋 Changes
- Introducing offline QR code generators - [endroid/qr-code](https://github.com/endroid/qr-code) and [Bacon/BaconQrCode](https://github.com/Bacon/BaconQrCode)
- Now tested against PHP 8
- Code clean up
image-charts.com decided to start watermarking QR codes...
Google image charts has gone dark; replaced the `GoogleQRCodeProvider` with `ImageChartsQRCodeProvider`
Improved `verifyCode()` a little.
[Ouch](https://github.com/RobThree/TwoFactorAuth/commit/fca87f2d09bbf370e47a22993b212049442023cf). Sorry. My bad.
📋 Changes
- Dropped support for PHP versions below 5.4 and HHVM
- Fixed a deprecation notice in the `MCryptRNGProvider` for PHP 7.1
- Fixed an issue in the `HashRNGProvider` for PHP 7.2+
📋 Changes
- ConvertUnixTimeDotComTimeProvider was dropped; this seems to no longer be online / work
- A new NTPTimeProvider was added
- The `verifyCode(...)` method now has a new argument that returns the timeslice that matched the code so you can save the timeslice and prevent replay-attacks.
Fixed a bug in `ConvertUnixTimeDotComTimeProvider` that used caching by accident.