Extension:OATHAuth

MediaWiki extensions manual

OATHAuth Release status: beta
Implementation	User rights, Special page, Page action
Description	An HMAC based One Time Password extension, providing two factor authentication.
Author(s)	Ryan Lane (Ryan lanetalk)
Latest version	0.1 (2012-05-07)
MediaWiki	1.20+
Database changes	Yes
License	GNU General Public License 2.0 or later
Download	Download snapshot (Git master) Git [?]: repo summary browse file tree commit history
Hooks used AbortChangePassword AbortLogin UserLoginForm ChangePasswordForm TwoFactorIsEnabled LoadExtensionSchemaUpdates GetPreferences
Translate the OATHAuth extension if it is available at translatewiki.net
Check usage and version matrix; code metrics
Bugs: list open list all report

The OATHAuth extension is an HOTP implementation. It provides two factor authentication via something you have (your phone or desktop client) and something you know (your user name/password). Client support is available for most feature phones, smartphones and desktops (see en:HOTP#Tokens).

Installation

• Download and extract the file(s) in a directory called OATHAuth in your extensions/ folder. If you're a developer and this extension is in a Git repository, then instead you should clone the repository.
• Add the following code at the bottom of your LocalSettings.php:

require_once "$IP/extensions/OATHAuth/OATHAuth.php";

• Run the update script which will automatically create the necessary database tables that this extension needs.
• Done! Navigate to "Special:Version" on your wiki to verify that the extension is successfully installed.

Resetting a users token

In the event that a user both loses their token generator AND the recovery tokens; two factor authentication may be removed from the user by deleting their row from the oathauth_users database table.

Changelog

0.1

• Initial version
• Missing functionality to act as a standalone extension, currently reuses a hook in LdapAuthentication. Standalone support to come in next version.