History: PluginTOTP

New in Tiki22

What is Time-Based One-Time Password?

A time-based one-time password (TOTP) is a temporary passcode generated by an algorithm that uses the current time of day as one of its authentication factors. Time-based one-time passwords are commonly used for two-factor authentication and have seen growing adoption by cloud application providers. In two-factor authentication scenarios, a user must enter a traditional, static password as well as a time-based one-time password to gain access to digital information or a computing system. Typically, the temporary passcode expires after 30, 60, 120 or 240 seconds.

TOTP (Time-based One-time Password algorithm) is a different use case than Two-factor authentication, which protects a Tiki instance.

This permits to manage the key (instead of putting on a smartphone) to connect to another site (which may or many not be a Tiki)

How PluginTOTP Works!

let's suppose I am trying to connect to my admin dashboard, I begin by entering my username and password. Then I’m prompted for the TOTP, which I read off of the token and type into the third login field. Once I’ve done so, I’m logged in.

Step 1 :

Checking Plugin Totp

Code:
https://gitlab.com/tikiwiki/tiki/-/blob/master/lib/wiki-plugins/wikiplugin_totp.php

PluginTOTP