GoogleAuthenticator | use server-side two-factor authentication library | Authentication library

I have a CakePHP application running on Cake PHP 3.8.13, CakeDC Users 8.5.1 and PHP 7.4. I am attempting to use a custom controller so that I can adjust the behaviour of the LoginTrait and PasswordChangeTrait.

I have been following the documentation in https://github.com/CakeDC/users/blob/master/Docs/Documentation/Configuration.md#using-the-users-email-to-login

However my custom UsersController is not being used.

I have added the following lines to /config/bootstrap.php

I have a CakePHP application running on Cake PHP 3.8.13 and CakeDC Users 8.5.1.

I am currently able to log on using the username field, but I would like to use the email field for authentication. I have followed the instructions on https://github.com/CakeDC/users/blob/master/Docs/Documentation/Configuration.md#using-the-users-email-to-login but the system is still trying to use the username field. If I change email to username in the src/Template/Plugin/CakeDC/Users/Users/login.ctp I can log in using the username.

How can I get it to use the email field instead?

src/Application.php

On login page I get this in dev.log:

Guard authenticator does not support the request. {"firewall_key":"main","authenticator":"App\Security\LoginFormAuthenticator"} []

Plus on the register page, after submitting I get

The CSRF token is invalid. Please try to resubmit the form.

And in dev.log:

Guard authentication failed. {"exception":"[object] (Symfony\Component\Security\Core\Exception\InvalidCsrfTokenException(code: 0):

The same code is working on my colleague's machine cannot get where can be the problem.

security.yaml

I need to install https://github.com/PHPGangsta/GoogleAuthenticator but if I run composer require "PHPGangsta/GoogleAuthenticator:1.0.1" I get an error:

Your requirements could not be resolved to an installable set of packages.

Problem 1 - The requested package phpgangsta/googleauthenticator 1.0.1 exists as phpgangsta/googleauthenticator[dev-master] but these are rejected by your constraint.

Here is composer.json where is only restriction for PHP version.

I'm trying to implement TOTP on 8086 assembly. The procedures that return unix time/30 and HMAC-SHA1 are working perfectly(checked). I'm using the key "0000000000" which is equal to 0x30303030303030303030(GAYDAMBQGAYDAMBQ in base32) and I'm getting different results than the Google Authenticator app. This is my code:

I am implementing two factor authentication using passportjs module [passport-2fa-totp][1]http://www.passportjs.org/packages/passport-2fa-totp/

I am able to successfully register user and store its key.

I am not able to verify totp-code generated by google authenticator app I am using the following code as reference,

`passport.use(new TwoFAStartegy(function (username, password, done) {

When I choose my email acount to log with google API, I have systematically a "invalid_grant" error. After debugging the GuardAuthenticator, everything's fine until retrieving user (it retrieves !) but when I return the user, I fall in onAuthenticationFailure with "invalid _grant" error.

I'm working with Symfony 4.1 and Doctrine ODM :

Here my code :

knpu_oauth2_client.yaml :

So i'm having a problem with google authenticator and my PHP.

So i'm using this library to generate QR codes: https://github.com/PHPGangsta/GoogleAuthenticator

So when I use my username to generate a code it works fine. I get something along the lines of: otpauth://totp/username?secret=aCodeInBase32&issuer=Mysite

For my case it is: otpauth://totp/NoahNok?secret=aCodeInBase32&issuer=JukeHost

however when doing this for any other use I get an invalid token error on the Google Authenticator app. It doesnt matter what else I put I always seem to get this error, yet it works fine for my account.

E.g this one doesn't work: otpauth://totp/Test?secret=KRSX&issuer=JukeHost

Is there something obvious im doing wrong?

Code im using: Some queries before to get data

I did a fresh installation. CakePHP 3.6 and CakeDC/Users everything following the docs. I have created custom UsersController.php with the traits for users administration under the admin prefix and after logged in with superuser (created from command line) I managed to create new user with "admin" role. Then logged out and logged in with the new user and browser shows "The page isn’t redirecting properly" error. Social login is disable.

/src/Config/bootstrap.php