Skip to content

Commit d70dddb

Browse files
author
null93
committed
Added configuration file for Magento Connect
1 parent 451c555 commit d70dddb

File tree

2 files changed

+160
-22
lines changed

2 files changed

+160
-22
lines changed

‎conf/JetRails_TwoFactor.xml

Lines changed: 143 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,143 @@
1+
<_>
2+
<form_key>Y5xphgKtS8IiGnx2</form_key>
3+
<name>JetRails_TwoFactor</name>
4+
<channel>community</channel>
5+
<version_ids>
6+
<version_ids>2</version_ids>
7+
</version_ids>
8+
<summary>The JetRails 2FA plugin adds an extra layer of security to your Magento store. User-based 2FA enablement ensures that admin users are following best security practices.</summary>
9+
<description> Your Magento storefront is vulnerable. Eliminate your security risk by downloading the JetRails Two-factor authentication module. Two-factor authentication, also known as 2FA, is a critical component for Magento security and is used widely by Magento backend admin users. Authentication is a security process to verify a user&apos;s identity. Authentication consists of three factors; something they know (ie. password), something they have (ie. phone), or something they are (ie. fingerprint).
10+
With a stock Magento installation a user is only given one method of authentication -- something they know. This usually consists of their administrative username and password. While having one method of authentication is typically secure, it has its limitations. By adding one additional layer of authentication, security is significantly strengthened. Having multiple methods of authentication is known as multi-factor authentication. It is often recommended that you choose at least two out of the three methods of authentication to ensure strong security.
11+
This plugin works with &quot;something they know&quot; and &quot;something they have&quot;. A Magento admin user that has the JetRails 2FA plugin enabled will not only be authenticated with &quot;something they know&quot;, which would be their admin username and password, but they will also authenticate with &quot;something they have&quot;, such as their phone or tablet.
12+
Once the JetRails 2FA plugin is installed for your Magento store and an admin successfully logs into their account, the JetRails 2FA plugin will prompt the user to set up their 2FA account. The typical user enrollment process takes up to five minutes including installation of the Google Authenticator application on their device. For more information on using the JetRails 2FA plugin, make sure to read the user guide which offers visual step-by-step instructions.
13+
2FA has become an industry standard and is implemented using the Time-Based One-Time Password (TOTP) algorithm. In developing this plugin, RFC-6238 was used for reference. Since 2FA gives an extra layer of protection to Magento’s authentication process, it is vital to every Magento installation.
14+
15+
This plugin comes with the following features and benefits:
16+
17+
- A Master Administrator can require 2FA to be utilized by specific users.
18+
- Usage of 2FA can be enforced and required for log in.
19+
- Once you use the 2FA to log in, there is an option to bypass authentication for a pre-configured number of days.
20+
- A Master Administrator can oversee every user&apos;s authentication process.
21+
- In the event of a lost or misplaced 2FA account, backup codes are available as an alternate method for authentication.
22+
- In the event of an attempted account breach, prevention protocols are in place via brute-force protection, which will temporarily block the account.
23+
- The threshold for the number of failed authentication attempts before a temporary ban is imposed is configurable.
24+
- The duration of a user&apos;s temporary ban is configurable.
25+
- An automatic instantaneous alert will be sent to the account owner and store admins informing them of an attempted breach. Any security warning will be logged with any relevant data such as the offender&apos;s IP address.
26+
- The 2FA account can be setup for devices (something they have) using the Google Authenticator app, which is available for every platform including iPhone and Android.
27+
</description>
28+
<license>MIT License (MIT)</license>
29+
<license_uri>https://opensource.org/licenses/MIT</license_uri>
30+
<version>1.1.1</version>
31+
<stability>stable</stability>
32+
<notes>- Added enterprise compatibility</notes>
33+
<authors>
34+
<name>
35+
<name>Rafael Grigorian</name>
36+
</name>
37+
<user>
38+
<user>jetrails</user>
39+
</user>
40+
<email>
41+
<email>[email protected]</email>
42+
</email>
43+
</authors>
44+
<depends_php_min>5.1.0</depends_php_min>
45+
<depends_php_max>5.6.0</depends_php_max>
46+
<depends>
47+
<package>
48+
<name>
49+
<name/>
50+
</name>
51+
<channel>
52+
<channel/>
53+
</channel>
54+
<min>
55+
<min/>
56+
</min>
57+
<max>
58+
<max/>
59+
</max>
60+
<files>
61+
<files> </files>
62+
</files>
63+
</package>
64+
<extension>
65+
<name>
66+
<name>Core</name>
67+
</name>
68+
<min>
69+
<min/>
70+
</min>
71+
<max>
72+
<max/>
73+
</max>
74+
</extension>
75+
</depends>
76+
<contents>
77+
<target>
78+
<target>magelocal</target>
79+
<target>mageskin</target>
80+
<target>mageskin</target>
81+
<target>mageskin</target>
82+
<target>mageetc</target>
83+
<target>magelocale</target>
84+
<target>magelocale</target>
85+
<target>magelocale</target>
86+
<target>magedesign</target>
87+
<target>magedesign</target>
88+
<target>magecommunity</target>
89+
</target>
90+
<path>
91+
<path/>
92+
<path>adminhtml/base/default/css/twofactor</path>
93+
<path>adminhtml/base/default/js/twofactor</path>
94+
<path>adminhtml/base/default/images/twofactor</path>
95+
<path>modules/JetRails_TwoFactor.xml</path>
96+
<path>en_US/JetRails_TwoFactor.csv</path>
97+
<path>en_US/template/email/twofactor_admin.html</path>
98+
<path>en_US/template/email/twofactor_user.html</path>
99+
<path>adminhtml/base/default/layout/twofactor.xml</path>
100+
<path>adminhtml/base/default/template/twofactor</path>
101+
<path>JetRails/TwoFactor</path>
102+
</path>
103+
<type>
104+
<type>file</type>
105+
<type>dir</type>
106+
<type>dir</type>
107+
<type>dir</type>
108+
<type>file</type>
109+
<type>file</type>
110+
<type>file</type>
111+
<type>file</type>
112+
<type>file</type>
113+
<type>dir</type>
114+
<type>dir</type>
115+
</type>
116+
<include>
117+
<include/>
118+
<include/>
119+
<include/>
120+
<include/>
121+
<include/>
122+
<include/>
123+
<include/>
124+
<include/>
125+
<include/>
126+
<include/>
127+
<include/>
128+
</include>
129+
<ignore>
130+
<ignore/>
131+
<ignore/>
132+
<ignore/>
133+
<ignore/>
134+
<ignore/>
135+
<ignore/>
136+
<ignore/>
137+
<ignore/>
138+
<ignore/>
139+
<ignore/>
140+
<ignore/>
141+
</ignore>
142+
</contents>
143+
</_>

‎package.xml

Lines changed: 17 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -2,29 +2,19 @@
22

33
<package>
44
<name>JetRails_TwoFactor</name>
5-
<version>1.1.0</version>
5+
<version>1.1.1</version>
66
<stability>stable</stability>
7-
<license uri="https://opensource.org/licenses/MIT" >MIT License (MIT)</license>
7+
<license uri="https://opensource.org/licenses/MIT">MIT License (MIT)</license>
88
<channel>community</channel>
9-
<compatible/>
109
<extends/>
11-
<date>2017-12-18</date>
12-
<time>17:26:25</time>
13-
<authors>
14-
<author>
15-
<name>Rafael Grigorian</name>
16-
<user>jetrails</user>
17-
<email>[email protected]</email>
18-
</author>
19-
</authors>
2010
<summary>The JetRails 2FA plugin adds an extra layer of security to your Magento store. User-based 2FA enablement ensures that admin users are following best security practices.</summary>
2111
<description>
2212
Your Magento storefront is vulnerable. Eliminate your security risk by downloading the JetRails Two-factor authentication module. Two-factor authentication, also known as 2FA, is a critical component for Magento security and is used widely by Magento backend admin users. Authentication is a security process to verify a user's identity. Authentication consists of three factors; something they know (ie. password), something they have (ie. phone), or something they are (ie. fingerprint).
2313
With a stock Magento installation a user is only given one method of authentication -- something they know. This usually consists of their administrative username and password. While having one method of authentication is typically secure, it has its limitations. By adding one additional layer of authentication, security is significantly strengthened. Having multiple methods of authentication is known as multi-factor authentication. It is often recommended that you choose at least two out of the three methods of authentication to ensure strong security.
2414
This plugin works with "something they know" and "something they have". A Magento admin user that has the JetRails 2FA plugin enabled will not only be authenticated with "something they know", which would be their admin username and password, but they will also authenticate with "something they have", such as their phone or tablet.
2515
Once the JetRails 2FA plugin is installed for your Magento store and an admin successfully logs into their account, the JetRails 2FA plugin will prompt the user to set up their 2FA account. The typical user enrollment process takes up to five minutes including installation of the Google Authenticator application on their device. For more information on using the JetRails 2FA plugin, make sure to read the user guide which offers visual step-by-step instructions.
2616
2FA has become an industry standard and is implemented using the Time-Based One-Time Password (TOTP) algorithm. In developing this plugin, RFC-6238 was used for reference. Since 2FA gives an extra layer of protection to Magento’s authentication process, it is vital to every Magento installation.
27-
17+
2818
This plugin comes with the following features and benefits:
2919

3020
- A Master Administrator can require 2FA to be utilized by specific users.
@@ -37,15 +27,20 @@
3727
- The duration of a user's temporary ban is configurable.
3828
- An automatic instantaneous alert will be sent to the account owner and store admins informing them of an attempted breach. Any security warning will be logged with any relevant data such as the offender's IP address.
3929
- The 2FA account can be setup for devices (something they have) using the Google Authenticator app, which is available for every platform including iPhone and Android.
40-
</description>
30+
</description>
4131
<notes>
42-
- Changed from role based to user based 2FA enforcement
43-
- Made remember me duration configurable
44-
- Made failed attempts configurable
45-
- Made ban duration configurable
46-
- Added a manage 2FA accounts page for super admins
47-
- Improved email templates
48-
</notes>
49-
<contents><target name="magecommunity"><dir name="JetRails"><dir name="TwoFactor"><dir name="Block"><dir name="Adminhtml"><dir name="Configure"><dir name="Edit"><file name="Form.php" hash="044ebab5fd86fe998df2c228b80dd50a"/></dir><file name="Edit.php" hash="5fc543d7a6955a7258b9fcaf8427074b"/></dir><dir name="Manage"><dir name="Container"><file name="Grid.php" hash="d3b064be9f9d8a284ffee26084d7df76"/></dir><file name="Container.php" hash="a6fde5de7745a4e4bea55ce12d872864"/></dir><dir name="Renderer"><dir name="Manage"><file name="Address.php" hash="eb6465368f2b7f6303529a1460204a4e"/><file name="State.php" hash="2b5f7605be775880b7162b0eaebb096b"/><file name="Status.php" hash="d033a6110dcc778f6d2480b1668bc436"/><file name="Timestamp.php" hash="a2bcbc63c2e1d1ad7fa04ca1fcf0776c"/></dir></dir><dir name="Template"><file name="Backup.php" hash="091bc82a54d6e53e5a797940c981b8c2"/><file name="Banned.php" hash="cffd81d1d3baac3381e596bab7546c5e"/><file name="Scan.php" hash="c61f3755c74e327bf84d63097c2054d0"/><file name="Verify.php" hash="89c57269f0369e8e037c79aeeb0c2f4c"/></dir></dir></dir><dir name="Helper"><file name="Cookie.php" hash="bcd2a02dc5043681664b2c762d640639"/><file name="Data.php" hash="9ec8e84c2c8a3ca14acb94ec7417e18c"/><file name="TOTP.php" hash="3db0a47fad6c7a16c9fcfd3e65186a12"/></dir><dir name="Model"><dir name="Adminhtml"><file name="Auth.php" hash="f069d5fe6d0513ad9a53cfc9677d6f7d"/><file name="Notify.php" hash="051e08c9432b90a464af51bdf7229a5b"/><file name="Observer.php" hash="9abbd949fc1cc9d40af1f9b58eb8446c"/><file name="Page.php" hash="5dd3dce29193848544d59cc0fae35a6a"/><dir name="Resource"><file name="Auth.php" hash="fb4b1590bc2771727c63db2a332e9559"/></dir><file name="State.php" hash="69cc7932949127029fc0f7aa0ac66f79"/><file name="Status.php" hash="61d157a9cc1a1307d3a720579f532265"/></dir></dir><dir name="controllers"><file name="ConfigureController.php" hash="92b73e566d19fc8f62bd0705c24c81fc"/><file name="LoginController.php" hash="156ea8227703c9f3ded40161d212ba51"/><file name="ManageController.php" hash="e072bd92868a2eb39cca932f0c8c029c"/><file name="SetupController.php" hash="fee01dd7b10ca492dbb19c9353f097cc"/></dir><dir name="etc"><file name="adminhtml.xml" hash="0914f1f9c3ce622f9ee0917bb19f79c8"/><file name="config.xml" hash="4555e7240cf7fe088e869bdd1279617e"/></dir><dir name="sql"><dir name="jetrails_twofactor_setup"><file name="install-1.1.0.php" hash="269944fd553e6baf6262b289e7d22bd2"/></dir></dir></dir></dir></target><target name="magedesign"><dir name="adminhtml"><dir name="base"><dir name="default"><dir name="layout"><file name="twofactor.xml" hash="39b9b81dc72709f809f251aa18267386"/></dir><dir name="template"><dir name="twofactor"><file name="backup.phtml" hash="086c15aca8fb13c89a4a66298309b9c4"/><file name="banned.phtml" hash="6ec9fd13cf5beb4854a0096ad82758c8"/><file name="logout.phtml" hash="a7cac17f4e56bd766dcecc40dbca95f1"/><file name="message.phtml" hash="b094f8b27952cedbaf3812365f6ef5dd"/><file name="page.phtml" hash="4d49f01d14d394d18dfa6909692bdf0d"/><file name="scan.phtml" hash="456e10c4c1098406b7f1a3b5fd68a20f"/><file name="verify.phtml" hash="5d7eefc8a1ef211b837a2b45ebc61af4"/></dir></dir></dir></dir></dir></target><target name="mageetc"><dir name="modules"><file name="JetRails_TwoFactor.xml" hash="961b142a2296369463931d0262e66bd5"/></dir></target><target name="magelocale"><dir name="en_US"><file name="JetRails_TwoFactor.csv" hash="d1105f81a8d84463befeb386bd333bc2"/><dir name="template"><dir name="email"><file name="twofactor_admin.html" hash="527a6d57f936c4ff9cf51638a5d36c52"/><file name="twofactor_user.html" hash="e303989b2f2f9b860653ab6f0052b137"/></dir></dir></dir></target><target name="mageskin"><dir name="adminhtml"><dir name="base"><dir name="default"><dir name="css"><dir name="twofactor"><file name="style.css" hash="c0866c446e70ac48fe3d159c7d37ec54"/></dir></dir><dir name="images"><dir name="twofactor"><file name="logo.png" hash="5ab953a16a402b9b98cc7a89e9bd1970"/><file name="logo.svg" hash="cf29753c31d7fd8f6ca28dd16a381e33"/></dir></dir><dir name="js"><dir name="twofactor"><file name="functions.js" hash="7709682c7bfe9c07cf3adce12b3238bc"/></dir></dir></dir></dir></dir></target></contents>
32+
- Added enterprise compatibility
33+
</notes>
34+
<authors>
35+
<author>
36+
<name>Rafael Grigorian</name>
37+
<user>jetrails</user>
38+
<email>[email protected]</email>
39+
</author>
40+
</authors>
41+
<date>2018-03-01</date>
42+
<time>23:30:32</time>
43+
<contents><target name="mageskin"><dir name="adminhtml"><dir name="base"><dir name="default"><dir name="css"><dir name="twofactor"><file name="style.css" hash="c0866c446e70ac48fe3d159c7d37ec54"/></dir></dir><dir name="js"><dir name="twofactor"><file name="functions.js" hash="7709682c7bfe9c07cf3adce12b3238bc"/></dir></dir><dir name="images"><dir name="twofactor"><file name="logo.png" hash="5ab953a16a402b9b98cc7a89e9bd1970"/><file name="logo.svg" hash="cf29753c31d7fd8f6ca28dd16a381e33"/></dir></dir></dir></dir></dir></target><target name="mageetc"><dir name="modules"><file name="JetRails_TwoFactor.xml" hash="961b142a2296369463931d0262e66bd5"/></dir></target><target name="magelocale"><dir name="en_US"><file name="JetRails_TwoFactor.csv" hash="d1105f81a8d84463befeb386bd333bc2"/><dir name="template"><dir name="email"><file name="twofactor_admin.html" hash="527a6d57f936c4ff9cf51638a5d36c52"/><file name="twofactor_user.html" hash="e303989b2f2f9b860653ab6f0052b137"/></dir></dir></dir></target><target name="magedesign"><dir name="adminhtml"><dir name="base"><dir name="default"><dir name="layout"><file name="twofactor.xml" hash="39b9b81dc72709f809f251aa18267386"/></dir><dir name="template"><dir name="twofactor"><file name="backup.phtml" hash="099d38371a555515bcb5e02c7b1b002f"/><file name="banned.phtml" hash="8ca4707aa41f89ed298f18f3d84d0a5e"/><file name="logout.phtml" hash="5c54443f5d71097c6efb6223cc653a1a"/><file name="message.phtml" hash="aadf3271ca1e4b72239934b417a6aaa7"/><file name="page.phtml" hash="9798cdcc6eb3a0655892b8a682f37884"/><file name="scan.phtml" hash="56e150f604b60cca45ec15f2df702523"/><file name="verify.phtml" hash="62311ea26b1e574b4ae52c6ea81dd581"/></dir></dir></dir></dir></dir></target><target name="magecommunity"><dir name="JetRails"><dir name="TwoFactor"><dir name="Block"><dir name="Adminhtml"><dir name="Configure"><dir name="Edit"><file name="Form.php" hash="d5aae3fcf47fdc59b0501b338096cfc6"/></dir><file name="Edit.php" hash="5e8edc34e463a7500922164722a451e8"/></dir><dir name="Manage"><dir name="Container"><file name="Grid.php" hash="a5d49cc5a0cf3860f076e132266503cc"/></dir><file name="Container.php" hash="c3146c7cf5ab9eed40c4e6dcfd4c1b52"/></dir><dir name="Renderer"><dir name="Manage"><file name="Address.php" hash="c3d9e91acfc5a06b1a8e616e154805ad"/><file name="State.php" hash="5ba0533d1aabf96be72e1aca92da70f6"/><file name="Status.php" hash="b6955ee8f894a478d6bc24759535ddb5"/><file name="Timestamp.php" hash="13e3719dc9d966cdcb0525d25ac9ef2b"/></dir></dir><dir name="Template"><file name="Backup.php" hash="b9d5619abd321b2d9a2acddb37d8e35b"/><file name="Banned.php" hash="e9729958c661a0174a88d29a8e52a4e1"/><file name="Scan.php" hash="692f8d87926acb5d6acefeedc0ebaecb"/><file name="Verify.php" hash="0169b6cfab037947079408b9e00f8f55"/></dir></dir></dir><dir name="Helper"><file name="Cookie.php" hash="561231505f7a42142a2ed13b224dde30"/><file name="Data.php" hash="e26f66838846a95ba546f763d4f57dc4"/><file name="TOTP.php" hash="444e01701412af7aa4b17345dbf7f2ac"/></dir><dir name="Model"><dir name="Adminhtml"><file name="Auth.php" hash="ddab41d938e7441e5c2662caa9cdb915"/><file name="Notify.php" hash="1c01b2a253dcd8312a50611d32a00b96"/><file name="Observer.php" hash="5d576d65217039368fc4c30677fdd89f"/><file name="Page.php" hash="a859a37a25693a370a2ec8ee9aa6a4fc"/><dir name="Resource"><file name="Auth.php" hash="a1bfe833b6adcedf5018e7f38c540f81"/></dir><file name="State.php" hash="99a13570698c9007cb2231c4fae5c925"/><file name="Status.php" hash="d7992181aeb454a08255c0da4ecc1fef"/></dir></dir><dir name="controllers"><file name="ConfigureController.php" hash="3420d84ffa53762af034ec6290941b25"/><file name="LoginController.php" hash="65e8bf6860fc5f6eba5cdbf01141e370"/><file name="ManageController.php" hash="c3155865d965f4a9f749545eb37ab0b2"/><file name="SetupController.php" hash="3fc01315cf5f0c3ab0cde718c842942a"/></dir><dir name="etc"><file name="adminhtml.xml" hash="0914f1f9c3ce622f9ee0917bb19f79c8"/><file name="config.xml" hash="2b8471016c99f3b0a1d68f5d6737e94f"/></dir><dir name="sql"><dir name="jetrails_twofactor_setup"><file name="install-1.1.0.php" hash="269944fd553e6baf6262b289e7d22bd2"/></dir></dir></dir></dir></target></contents>
44+
<compatible/>
5045
<dependencies><required><php><min>5.1.0</min><max>5.6.0</max></php></required></dependencies>
5146
</package>

0 commit comments

Comments
 (0)