Two-Step Authentication: No longer working, and no way to disable?

[James Laslavic]

I enabled two-step authentication, but I'm not receiving the text messages. They don't come when I try to log in at a computer, and they don't come when I try to get the android app working. Has this feature been disabled? Am I the only one having this problem?

What makes this even worse is that I don't see a way to turn off two-step authentication once it's turned on. Am I missing how to do this?

[Vijay Pandurangan]

The 2FA that mitro supports does not involve sending text messages. We use a TOTP algorithm (http://tools.ietf.org/html/rfc6238) to handle that. When you first set up 2FA, you should have synced a mobile app (e.g. Google Authenticator) with the QR code. You must use that app to generate a code used to log in.

Vijay

On Sat, Aug 9, 2014 at 2:47 PM, James Laslavic <square...@gmail.com> wrote:

I enabled two-step authentication, but I'm not receiving the text messages. They don't come when I try to log in at a computer, and they don't come when I try to get the android app working. Has this feature been disabled? Am I the only one having this problem?

What makes this even worse is that I don't see a way to turn off two-step authentication once it's turned on. Am I missing how to do this?

--
You received this message because you are subscribed to the Google Groups "Mitro developers list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mitro-dev+...@googlegroups.com.
To post to this group, send email to mitr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mitro-dev/f1aa315d-2345-4708-9dae-d6a44c892efb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[James Laslavic]

Okay. I figured it out. Thanks for pointing me in the right direction!

As an interaction designer, I suggest that wherever it asks for the two-step authentication code, it should at least have a link to a help page that says where to go to get the code. Right now, it doesn't even say that it's using Google Authenticator. It should say that, and should also list all the steps that users would need to take to get from where they currently are to where they need to go to view the code. Just something to consider. :)

[Vijay Pandurangan]

you need to do it via the extension.  You cannot do it by going directly to a url because it requires a signed nonce.

On Mon, Feb 9, 2015 at 5:19 PM, Winston Hong <hongy...@gmail.com> wrote:

Hello James.

I have run Mitro server on ubuntu12.04/localhost very well.

I can access the webpage of Mitro webpage

https://localhost:8443/mitro-core/api/BuildMetadata

I can sign up a new user account.

resource://mitro-login-manager-at-jetpack/mitro-login-manager/data/html/signup.html

I can sign in Mitro.

resource://mitro-login-manager-at-jetpack/mitro-login-manager/data/html/popup.html

I check the webpage of sign-in webpage and find the following code

    <div id="tfa-code" class="overlay">
      <div class="vertical-center">
        <div class="vertical-center-wrapper">
          <div class="vertical-center-container">
            <h1>Two-Step Authentication</h1>
            <p>Enter the 2-step verification code <br />from your mobile application:</p>
            <div class="field">
              <input id="tfa-code-input" type="text">
            </div>
            <button class="button">Verify</button>
          </div>
        </div>
      </div>

I know the working mechanism of Google Authenticator with the QR code.

But I do not know how to enable two-factor authentication of Mitro.

Would you please shed me some light on how to enable two-factor authentication of Mitro? Thank you very much.

The Mitro's two-factor authentication module is shown in the following link.

https://github.com/mitro-co/mitro/tree/master/mitro-core/java/server/src/co/mitro/twofactor

Thank you very much.

Best regards,

Winston Hong

On Saturday, August 9, 2014 at 5:47:23 PM UTC-4, James Laslavic wrote:

I enabled two-step authentication, but I'm not receiving the text messages. They don't come when I try to log in at a computer, and they don't come when I try to get the android app working. Has this feature been disabled? Am I the only one having this problem?

What makes this even worse is that I don't see a way to turn off two-step authentication once it's turned on. Am I missing how to do this?

--

You received this message because you are subscribed to the Google Groups "Mitro developers list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mitro-dev+...@googlegroups.com.
To post to this group, send email to mitr...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/mitro-dev/a4dcd09d-ff20-40e9-bfb3-d972d307f98f%40googlegroups.com.