google-authenticator | Open source version of Google Authenticator | Authentication library

Please help me to find out the solution.

1. Does anyone know how to write a unit test stub using PHPUnit for scanning a barcode? FYI : In our application, two-factor authentication used(google authenticator). When users enter a valid username and password next screen displayed with barcode, we scan that barcode using the google-authenticator app on mobile then 6 digit code is generated, which we enter in web application then redirects to the home page.
2. How to set a cookie while writing unit test stub for login?

I have CAS 6.2.x running in Kubernetes building the image from this repo. I am passing in the cas.properties file via configmap.I have it wired up against Active Directory and am able to login with the Username/Password. I am now working to enable MFA with the Google Authenticator plugin. I have this working as well if I force the flow globally with the following:
cas.authn.mfa.global-provider-id=mfa-gauth

When I try to use the values described here for Multifactor Authentication: Principal Attribute Trigger it doesn't send me to the MFA flow. These are the settings that I have set:
cas.authn.ldap[0].principalAttributeList=userPrincipalName,cn,givenName,sAMAccountName,memberOf
cas.authn.mfa.global-principal-attribute-name-triggers=memberOf
cas.authn.mfa.global-principal-attribute-value-regex=ForceMfa

When I log in these are the values returned back for memberOf:

memberOf
[CN=Group2,OU=MyOu,DC=subdomain,DC=domain,DC=local, CN=Group1,OU=MyOu,DC=subdomain,DC=domain,DC=local, CN=ForceMfa,OU=MyOu,DC=subdomain,DC=domain,DC=local]
Principal

I used Misagh blog post as a guide.

If I change the trigger and regex to sAMAccountName and my username it then works as expected. Not sure if I need to change the regex format to find the group name or if I just have something else wrong. It just seems like the regex is not finding a match for some reason as the settings seem to be working for me, just not with memberOf.

Thank you

I am a newbie to FreeRadius, so my knowledge is not in-depth. I am trying to configure a central radius to handle any network based systems (switches, routers, firewalls, & VPN) to authenticate end-users when they are trying to SSH and/or VPN into the system. All of my equipment supports radius.

Environment:

• OS = CentOS 7
• FreeRadius = 3.0.13
• google-authenticator-libpam = 1.09
• I did not post my config files as they are exactly covered by the reference link. I will post them in a follow-up post for ease of reading

Reference: I followed this page to get the majority of the system operational (SSLVPN Two - Factor Authentication with Google Authenticator

What is working:

• Using radtest, I can authenticate with an AD based user with their AD password+OTP
• Was able to get a network switch authenticate and access-accept reply message to include custom VSA for user group (used unlang within the post-auth area based only on the user-name). Not ideal but just for testing the concept.

Next Steps (the question): I want to be able to ultimately decide if the end-user is granted access to VPN or switch via AD security groups. So from my understanding, I could perform this within the auth module or the post-auth. I believe the correct place would be in the post-auth possible using unlang (but correct me if this is not the general area to do this). I don't know how/where I need to perform the LDAP lookup to get the user-name AD security group info. In theory, once I have the user's name & group info, these can be used in multiple filters to declare if they get access to a group of systems. Thanks

I am implementing two factor authentication with Google Authenticator in a NativeScript app starting from this implementation. Since Node's crypto module doesn't run inside NativeScript, I am trying to make it work with CryptoJS.

This is the working Node code. The function returns a buffer with the correct value.

(Solution) TL;DR: Google assumes the key string is base32 encoded; replacing any 1 with I and 0 with O. This must be decoded prior to hashing.

Original Question

I'm having difficulty having my code match up with GA. I even went chasing down counters +/- ~100,000 from the current time step and found nothing. I was very excited to see my function pass the SHA-1 tests in the RFC 6238 Appendix, however when applied to "real life" it seems to fail.

I went so far as to look at the open source code for Google Authenticator at Github (here). I used the key for testing: "qwertyuiopasdfgh". According to the Github code:

I used a tutorial for implementing Google's 2FA: https://www.sitepoint.com/2fa-in-laravel-with-google-authenticator-get-secure/

The ValidateSecretRequest class extends from App\Http\Requests; but I don't have this class in my "Requests"-folder. So I used use Illuminate\Http\Request;

But when I call this class in the Controller I get an error.

RuntimeException - Session store not set on request …/vendor/laravel/framework/src/Illuminate/Http/Request.php 411

I'm trying to implement Google2FA with this tutorial: https://www.sitepoint.com/2fa-in-laravel-with-google-authenticator-get-secure/

I use Laravel 5.8 and in the tutorial they're using something like 5 I guess, thats why I dont have the app/Http/Controllers/Auth/AuthController.php

anymore. I have LoginController.php and RegisterController.php

If I try to login and test, I get this error:

Argument 2 passed to App\Http\Controllers\Auth\LoginController::authenticated() must be an instance of App\Http\Controllers\Auth\Authenticatable, instance of App\User given, called in C:\xampp\htdocs\XXX\vendor\laravel\framework\src\Illuminate\Foundation\Auth\AuthenticatesUsers.php on line 109

Code:

I tried install 'Google Authentication' and 'Authy' to use 2-step verification, but the both don't give-me the TOTP key ...

The code for input the 6 digits i found here

I tried get all TOTP keys using this but i receive : 'secret=undefined'

What i need? I need some method to get the 6 digits of authentication or some method to simply get the TOTP key, as I just need to implement it in the code.

Does anyone have any idea how I can do this? I'm using Python + Selenium

I installed google two factor authentication on my linux server.
(thanks to: https://github.com/google/google-authenticator-libpam)

When I try to access root account via ssh, authenticator works fine.