mirror of
https://github.com/RobThree/TwoFactorAuth.git
synced 2026-08-19 18:23:09 +00:00
RobThree
004739be32
* Added simple "PSR-4" autoloader * Classes and interfaces to separate files * Updated README for namespaces
29 lines
1.6 KiB
PHP
29 lines
1.6 KiB
PHP
<!doctype html>
|
|
<html>
|
|
<head>
|
|
<title>Demo</title>
|
|
</head>
|
|
<body>
|
|
<ol>
|
|
<?php
|
|
error_reporting(-1);
|
|
require_once 'loader.php';
|
|
Loader::register('RobThree','RobThree');
|
|
|
|
use RobThree\TwoFactorAuth;
|
|
|
|
$tfa = new TwoFactorAuth\TwoFactorAuth('MyApp', 6, 30, 'sha1', new TwoFactorAuth\Providers\QRicketProvider());
|
|
|
|
echo '<li>First create a secret and associate it with a user';
|
|
$secret = $tfa->createSecret();
|
|
echo '<li>Next create a QR code and let the user scan it:<br><img src="' . $tfa->getQRCodeImageAsDataUri('My label', $secret) . '"><br>...or display the secret to the user for manual entry: ' . chunk_split($secret, 4, ' ');
|
|
$code = $tfa->getCode($secret);
|
|
echo '<li>Next, have the user verify the code; at this time the code displayed by a 2FA-app would be: <span style="color:#00c">' . $code . '</span> (but that changes periodically)';
|
|
echo '<li>When the code checks out, 2FA can be / is enabled; store (encrypted?) secret with user and have the user verify a code each time a new session is started.';
|
|
echo '<li>When aforementioned code (' . $code . ') was entered, the result would be: ' . (($tfa->verifyCode($secret, $code) === true) ? '<span style="color:#0c0">OK</span>' : '<span style="color:#c00">FAIL</span>');
|
|
?>
|
|
</ol>
|
|
<p>Note: Make sure your server-time is <a href="http://en.wikipedia.org/wiki/Network_Time_Protocol">NTP-synced</a>! Depending on the $discrepancy allowed your time cannot drift too much from the users' time!</p>
|
|
</body>
|
|
</html>
|