Comments (14)
Do all of the other methods work?
from two-factor.
Do we have anyone else who can also test with a Yubikey?
from two-factor.
Tested with a Yubikey NEO.
Works on one domain updated to 4.6.1 but unable to add keys to new users.
Fresh install on another domain installed as 4.6.1 fails every time. Briefly displays a message asking you to use your key then shows Failed.
Both wordpress installs test http and https.
Edit:
Google Auth works fine.
from two-factor.
Can confirm on 4.6.1 I can't add a Yubico Fido U2F key. Pressing the "Add new" button results in a "Failed" message and nothing seems to light up on the dongle itself. OTP seems to work fine with Goog authenticator
MacOS Sierra / Chrome 54.0.2840.59 (64-bit)
from two-factor.
@georgestephanis Here is the error message from the console when trying to register a new Yubikey:
I'm looking into this now.
from two-factor.
@JSkier21 @meltedprocessor @GreenTentacle
Was your website recently upgraded to use HTTPS? If so, the U2F AppID
probably changed from http://example.com
to https://example.com
and you need to re-register the security keys.
Are there any error/debug messages in the browser console when adding the security key or during the login? Something like:
Is this the first time you're adding the key to the website (The U2F JS library will return an error if the same security key is being registered twice)? Try removing all existing keys from your profile and adding them again.
from two-factor.
AppID has been a problem on current domain (was waiting for Let's Encrypt - Took a while) but one domain tested has had a StartCOM SSL Cert installed for a long while.
Removed plugin - Updated addresses in wordpress settings - Added plugin and tested working fine.
Had to add the key then go back into user settings and enable U2F for it to work (didn't like doing both at the same time).
I am seeing in the below in the console every time wp-login.php is loaded although it's not causing anu problems.
Many thanks for the update!
from two-factor.
Updated to the newest plugin update and made sure site address and wordpress address were set to https:// instead (woops). Still can't add a Fido token for another user (which sort of makes sense when i think about it, but maybe should warn ?), but logging in as that user and adding the token works fine.
from two-factor.
@meltedprocessor @GreenTentacle The funny thing is that the latest update didn't include any code changes -- it was triggered automatically for some reason.
@meltedprocessor That JS error on the username/password login page is a known issue #126.
@GreenTentacle Adding security tokens to other users currently isn't possible because it always references the current user here. Here is the issue #127.
I'm closing this because it works correctly over HTTPS with a fresh install.
from two-factor.
Sorry for not getting back on this. Anyway, I see it's closed. Tried removing and then adding keys but could not. I'll remove and try installing plugin again.
from two-factor.
u2fL10n not defined now. Won't add new keys. I'll just use Google Auth.
from two-factor.
u2fL10n not defined now.
@JSkier21 Which page is that? Can you check the browser console output?
from two-factor.
On the profile page. Just upgraded to latest version, still an issue.
Below is the output you asked for.
load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,zxcvbn-async&ver=4.6.1:11 Uncaught ReferenceError: _zxcvbnSettings is not defined at a (load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,zxcvbn-async&ver=4.6.1:11) a @ load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,zxcvbn-async&ver=4.6.1:11 fido-u2f-admin.js?ver=0.1.0-dev.1:14 Uncaught ReferenceError: u2fL10n is not defined at HTMLButtonElement.<anonymous> (fido-u2f-admin.js?ver=0.1.0-dev.1:14) at HTMLButtonElement.dispatch (load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,zxcvbn-async&ver=4.6.1:3) at HTMLButtonElement.r.handle (load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,zxcvbn-async&ver=4.6.1:3)
from two-factor.
EDIT:
Security policy was to blame for this not working. Fully functional now.
Not sure that it matters, but which version should I use? Github or WP hosted?
Output from GitHub plugin on profile page trying to add a key:
Uncaught ReferenceError: u2fL10n is not defined at HTMLButtonElement.<anonymous> (fido-u2f-admin.js?ver=0.1.0-dev.1:14) at HTMLButtonElement.dispatch (load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,zxcvbn-async&ver=4.7:3) at HTMLButtonElement.r.handle (load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,zxcvbn-async&ver=4.7:3) (anonymous) @ fido-u2f-admin.js?ver=0.1.0-dev.1:14 dispatch @ load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,zxcvbn-async&ver=4.7:3 r.handle @ load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,zxcvbn-async&ver=4.7:3
from two-factor.
Related Issues (20)
- Language support HOT 2
- Previously created sessions continue being valid after initial 2FA activation
- 503 Service Unavailable after inserting 2FA - works with several tries HOT 6
- Last Login HOT 2
- OTP with Multisite may not work HOT 2
- WooCommerce Shop Manager role "Sorry, you are not allowed to do that" error when entering auth code for TOTP HOT 1
- Implement Disable Provider method HOT 1
- Cannot register u2f key - failed to execute 'PostMessage' on 'DOMWindow' HOT 1
- incompatibility with v6.4.1 of WordPress HOT 1
- wp_login hook not firing on login for users with a two-factor option enabled HOT 2
- Timestamp for QR and Backup Code keygen HOT 3
- Prefer "require_once" over "require" in a few spots
- Plugin hangs when the security plugin option is clicked HOT 1
- Limit WP.org readme.txt tags to 5 HOT 1
- Use TOTP token with display HOT 1
- Auto Enable 2fa when user's signup? HOT 5
- Can neither use existing nor register new FIDO2 token with "FIDO U2F" → install Webauthn addon for two-factor HOT 1
- Please use PHPStan HOT 4
- Account recovery after losing 2fa key
- Replace table tags with div tags to match Application Passwords styles
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from two-factor.