phpmyadmin / phpmyadmin/phpmyadmin
Two factor authentication should allow more than one U2F device
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 7.9k
- Forks
- 3.6k
- Avg merge
- 4d 18h
- Merged PRs (30d)
- 36
Description
Is your feature request related to a problem? Please describe.
When the Two Factor Authentication via hardware key is activated, only one device can be configured.
Describe the solution you'd like
More than one device should be possible. If one device gets lost, there should be a backup. When I use phpMyAdmin on my laptop, it would be nice to use another key so I can have the other one at home or at my workplace.
Other applications like nextcloud allow the configuration of more than one hardware token.
Additional context
- phpMyAdmin version: 4.9.0.1
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating phpMyAdmin's hardware-key/U2F two-factor authentication entry points and its existing tests; the issue does not name specific files. Trace how the current single device is configured and verified, then define and test behavior for registering and using multiple devices, including a backup key after one is lost.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100