Two-Factor Authentication module released

rocky · #11 09-02-2013, 08:22 AM

Quote:

Originally Posted by while.e.kyote

in our case, it was an API implementation, but that wasn't where the support issues were.. In a couple of our test users they would go through the motions to get registered and have trouble either with the app on the phone or the registration process (we never did get it sorted out which was which)

The symptom was that Authy would show the "application" registered but it would never appear on the phone itself.

I've successfully went through the registration process on I guess about 20 phones. When you run www.authy.com/install in your phone browser it automtically suggests you to download an appropriate application, you should just follow the steps.

In any case, thank you for your feedback as well. Hope you try this module for X-Cart one day. Should you encounter any problems with registration, please contact me, Alex Diatchkov, directly via HelpDesk and I'll be glad to assist you.

philrisk · #12 09-03-2013, 02:27 AM

Would it not have been easier to use Google Authentication? It's easy to use!

exsecror · #13 09-03-2013, 05:25 AM

Yeah I actually wondered that too, why wasn't there an effort to implement RFC-4226 so that people could use Google Authenticator (or any RFC compliant HOTP client) rather than make them sign up for a commercial service? Especially when there's libraries like PHPGangsta (https://github.com/PHPGangsta/GoogleAuthenticator) are available.

cflsystems · #14 09-03-2013, 08:15 AM

while.e.kyote · #15 09-03-2013, 08:25 AM

Thats what we did, we bailed out on Authy for google auth .. when i get round to it we will probably do it for x-cart too.

rocky · #16 09-03-2013, 09:25 AM

Authy is a reliable service, easy to plug-in and set up.

exsecror, you speak of it as though there are only commercial plans. One can sign up for the starter (absolutely free) plan and use it, the number of tokens is more than sufficient to protect admin area.

In any case, why not add Google Authenticator as a second option so that customers could choose which service to use. Thank you for the suggestion.

exsecror · #17 09-03-2013, 10:25 AM

Quote:

Originally Posted by rocky

exsecror, you speak of it as though there are only commercial plans. One can sign up for the starter (absolutely free) plan and use it, the number of tokens is more than sufficient to protect admin area.

I do apologize if I articulated that as such but I only took a cursory look at the site so I was unaware of the starter plan. I just tend to take a hard line on relying too heavily on outside services because if they go down or something changes you're rather stuck.

rocky · #18 09-16-2013, 07:51 AM

Two-Factor Authentication for 4.6.1 has been recently uploaded to the File Area. Please feel free to use.

Tigershark8700 · #19 09-20-2013, 06:24 PM

I've actually had a very bad experience with authy so far (not the X-Cart module) but the company itself.. Going through the registration process was a nightmare, and after 3 support tickets, emails and phone calls, still no response.. sigh :/

while.e.kyote · #20 09-20-2013, 07:44 PM

Same thing we found .. no response from anyone ..

Moved everything to GA .. didn't have to open a ticket yet, rumor has it you won't get a response, but everything worked as advertised so there was no need.

Quote:

Originally Posted by Tigershark8700

I've actually had a very bad experience with authy so far (not the X-Cart module) but the company itself.. Going through the registration process was a nightmare, and after 3 support tickets, emails and phone calls, still no response.. sigh :/