gatekeeper
gatekeeper copied to clipboard
Finish auth token handling
There's a bit of functionality already in the system to support two-factor authentication tokens, but it needs to be finished out. This includes:
- Updating the
create_auth_token_tablemigration to add theverifiercolumn - Creating the interface/abstract class to define the
Verifierstructure - Creating verifiers for GAuth and Yubikey (using enygma/gauth and enygma/yubikey)
- Adding calls from someplace, maybe just the main
Gatekeeperclass for verifying the provided token information.
This could be in multiple places too...maybe a method on the UserModel that takes in an abstract token instance and runs the matching verifier based on the current configuration. This will need some way to get values from the current configuration (like Gatekeeper::getConfig) for things like secret keys or API credentials.
I want to make sure: does what you say mean that in the auth_tokens table, the verifier column isn't used?
What is the purpose of that column? added security?