lahaxearnaud/laravel-u2f

U2F support for laravel 5

laravel-u2f

, _(*1)

This PSR4 package provide u2f protocol integration in laravel 6 framework., _(*2)

Requirements

• A top level domain
• HTTPS
• PHP >= 7.2 (If you want to use this package with php 5 you need to use the version v1.1.0)

Install

Via Composer, _(*3)

$ composer require lahaxearnaud/laravel-u2f

Laravel 5.5+ uses Package Auto-Discovery, so doesn't require you to manually add the ServiceProvider., _(*4)

Configs

$ php artisan vendor:publish --provider="Lahaxearnaud\U2f\U2fServiceProvider" --tag=u2f-config

Assets

$ php artisan vendor:publish --provider="Lahaxearnaud\U2f\U2fServiceProvider" --tag=u2f-components

Views

$ php artisan vendor:publish --provider="Lahaxearnaud\U2f\U2fServiceProvider" --tag=u2f-views

Note that default views use Laravel's default Bootstrap 4. If you don't use it, you have to update the views., _(*5)

Migrations

$ php artisan vendor:publish --provider="Lahaxearnaud\U2f\U2fServiceProvider" --tag=u2f-migrations
$ php artisan migrate

Middleware

In the app/Http/Kernel.php file, _(*6)

 protected $routeMiddleware = [
    'auth' => \App\Http\Middleware\Authenticate::class,
    // ...
    'u2f' => \Lahaxearnaud\U2f\Http\Middleware\U2f::class,
    ];

Usage

A example project is available to help you with the configuration / usage., _(*7)

Middleware

In the route.php file add the u2f middleware on your routes or groups:, _(*8)

Route::get('admin/profile', ['middleware' => ['auth', 'u2f'], function () {
    //
}]);

In controller:, _(*9)

/**
 * Create a new controller instance.
 *
 * @return void
 */
public function __construct()
{
    $this->middleware(['auth', 'u2f']);
}

Configuration

Events

• Name: u2f.authentication, _(*10)

  Payload: [ 'u2fKey' => $key, 'user' => Auth::user() ], _(*11)

  Description: An user authenticate himself with a valid u2f key, _(*12)

• Name: u2f.register, _(*13)

  Payload [ 'u2fKey' => $key, 'user' => Auth::user() ], _(*14)

  Description: An user register a new u2f key, _(*15)

Changelog

Please see CHANGELOG for more information what has changed recently., _(*16)

Security

If you discover any security related issues, please email lahaxe[dot]arnaud[at]gmail[dot]com instead of using the issue tracker., _(*17)

Credits

• Arnaud LAHAXE
• Mike Robinson
• Chakphanu Komasathit
• Anne Jan Brouwer
• Alexis Saettler
• Thomas Lété
• Luca Bognolo

License

The MIT License (MIT). Please see License File for more information., _(*18)

After coding

What better way to relax, after spending hours coding, than a good cocktail on the terrace?, _(*19)