authenticator-extension / authenticator Goto Github PK

View Code? Open in Web Editor NEW

2.9K 125.0 686.0 9.29 MB

Authenticator generates 2-Step Verification codes in your browser.

Home Page: https://authenticator.cc

License: MIT License

TypeScript 58.22% HTML 1.25% Shell 2.00% Vue 29.45% SCSS 9.08%

authenticator 2fa chrome-extension firefox-addon otp webextension edge-extension

authenticator's Introduction

Authenticator

Authenticator generates 2-Step Verification codes in your browser.

Available for Chrome, Firefox, Microsoft Edge and Safari

Build Setup

# install development dependencies
npm install
# compile
npm run [chrome, firefox, prod]

To reproduce a build:

npm ci
npm run prod

To reproduce a build for Safari, please follow contribution guidance in Authenticator-Extension/Authen

Development (Chrome)

# install development dependencies
npm install
# compiles the Chrome extension to the `./test/chrome` directory
npm run dev:chrome
# load the unpacked extension from the `./test/chrome/ directory in Chrome

Note that Windows users should download a tool like Git Bash or Cygwin to build.

authenticator's People

Contributors

Stargazers

Watchers

Forkers

jaguarsakha memsec rcoscali happy-ferret idrussardi timburridge75 lolo32 vonbluebaugh volja777 sunui mikifuns doktor1509 pchaitu leowang8023 sea51930 owd-larrd andreja96 bmining den4ik1603 immrhiep sana7877 sibay45 minetools alexandra1702 afk65 radik248 koppsnurr cryptoz258 krool7 ios1974 workjayme5 blackzoneid yurii745 macega correosdelbosque nurul35 ashelley matt-d-brown coder-caicai netluxe mtco zyne4 manhdong macman178 digitaldiamonds tony34 marypaz monosp marchtala knoppixmeister mcnk88 franscb65 ckikua lolozw lemoooooo gabador2 dharmeshspatel4u ariel-fernandez mussolinate morogasper rustedlightning daniel2712076733 gisticon chanane2 brkkylmzz rewilcox donewin cankmeyil p-pradeepreddy jnzks wahyu286 tonywahlman ezclocker kandikane 6paklata phixcn turak11111 darobtm990 maiarosaqwert reyanahsan bibilove mikhail1234569 vivaldiyrik degreen84 brucewu16899 amiqdadi1 roffa420 digideskio zhukovskij paulghattas normann75 joy1792 fruitbreaker andrey92176 rozhbin2019 madhawa1984 noopsfun uripham1989 vipnik8 vanessagugliet

authenticator's Issues

Reconfigure Crowdin

Highlight matched entry with current url

Encrypted data sync delay between different browsers may break the extension

Let's say, there are 2 browsers A and B with the same encrypted data:

{
  hash_1: {
    secret: <encrypted secret_1 with password_1>
  }
}

Once the user changes password in A with password_2, data on A is now:

{
  hash_1: {
    secret: <encrypted secret_1 with password_2>
  }
}

Now we know account data with hash_1 on A is newer then B, so B's data with hash_1 will be overwritten by A, in another word, one day, data with hash_1 will also have secret encrypted with password_2 on B.

However, we know data sync with Chrome is not instantly, user possible add another account with hash_2 with the old password_1 on B, that is to say B is not synced with A in time, but another account is added. Now data on B is:

{
  hash_1: {
    secret: <encrypted secret_1 with password_1>
  },
  hash2: {
    secret: <encrypted secret_2 with password_1>
  }
}

We notice that data with hash_1 will be synced to A from B, and data with hash_2 will be synced to B from A, then both of A and B have such data:

{
  hash_1: {
    secret: <encrypted secret_1 with password_2>
  },
  hash_2: {
    secret: <encrypted secret_2 with password_1>
  }
}

We cannot handle multi-password currently, so the user will only see part of accounts with different passwords, and Export / Import, Security, Add account will never work.

We really need provide a method to allow users to fix their data then.

You can drag even when not in edit mode

Setting non-standard characters in account fields breaks extension

Why when I try to open the program can only see a white window, and the codes do not appear?

Rebase on dev branch

@mymindstorm do you have any uncommited work after 5458490 ? I will do a rebase on dev branch to fix messed commit line if it is okay.

Continuous integration

@Sneezry pretty much all the big CI (travis / circleci) services have a free tier for open source software, do you want me to try to throw something basic together?

Things to test:

addons-linter
gts check
npm compile

background going black everytime i try to scrolling the pop window

firefox version 57.0.4(64bit)

Is it necessary to translate about info in i18n?

The about content is just a set of license information, how about move it into popup.html, and just leave it as English?

Cleanup strings

Release 5.0 Tracker Bug

Is there anything else major to finish before merging and deploying 5.0.2? I think what we have is pretty solid for a release.

Updating firefox version clears codes

Version disabled, investigating cause.

Bug: Bittrex authenticator not work

code generated for bittrex is 000000

Signed version of pre-release

Just FYI: I've added a signed version of the Firefox build to the pre-release tag. Firefox is a bit more strict on unsigned extensions, so you might not have to create an unlisted version.

Write documentation

Add issuer field to manual add screen

Here, there shall be fields for both issuer & account name

QR code not scanning properly

Here's a sample barcode from the process:

Read passphrase from localStorage for existing users

Users checked remember passphrase checkbox in extension may forget password themselves, we should load cached password for them, and remove cached passphrase after they change the passphrase in the next time.

You can drag past the add code button

Message windows need css tweaks

Message windows should have a border and like everything else.

QR quick scan button is misaligned

Change Dropbox OAuth to token flow

Following Dropbox team's suggestion, change OAuth to token flow from code flow, and remove app key and app secret from source code.

Chrome will open new page to import backups as well

d9a754e

import.html will handle both import from file and old version backup code

HOTP code displayed as invalid

One of the websites I login to requires a Yubikey that uses the OATH-HOTP protocol. Unfortunately, pasting the Yubikey secret key into Authenticator doesn't work.

When you have invalid keys in storage downloading backup will include them

Downloaded backup:

{
  "b20f962cbf083014474164e0504eb65c": {
    "account": "[email protected]",
    "hash": "b20f962cbf083014474164e0504eb65c",
    "issuer": "",
    "secret": "QXA5R6AHKYP557S2OMVGQNVPIJYELMQD",
    "type": "totp",
    "encrypted": false,
    "index": 0,
    "counter": 0
  },
  "test": "test"
}

test key should not be there.

chrome.storage.sync.set({"test": "test"}) and download backup to repro