Two Factor Authentication

More
5 years 6 months ago - 10 months 2 weeks ago #247 by Bruce Armstrong
Bruce Armstrong created the code: Two Factor Authentication
Sample code showing how to do two factor authentication using PowerBuilder

This message has an attachment file.
Please log in or register to see it.

Last Edit: 10 months 2 weeks ago by Bruce Armstrong. Reason: Updating code to work with PowerServer and correct timestamp structure defintion

Please Log in or Create an account to join the conversation.

More
2 years 7 months ago #419 by VINOD NAIR
VINOD NAIR replied the code: Two Factor Authentication
Hi Bruce,

I downloaded this sample and implemented in client-server without any issues using PB 2019 R2. But when we build this into web and deploy it on PowerServer 2020 and try to scan the QR code we get the following error "Error: Key not recognized". We tried to increase the width of the picture object but don't think that is an issue. Does this work on Appeon PowerServer 2020 because to us we think the QR code image might be getting messed on the web. Do you know what we could try to fix it?

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #306 by George Mikhailovsky
George Mikhailovsky replied the code: Two Factor Authentication
Bruce

I deploy to localhost, i.e., to the same server where I ran my C/S application that works fine. But after your message, I checked system time on my server and it is exactly the same as on my IPhone. Moreover, I ran the modified generatepin() function triple:

Pin1 = generatepin ( key, CurrentInterval - 1)
Pin2 = generatepin ( key, CurrentInterval )
Pin3 = generatepin ( key, CurrentInterval + 1)

for previous, current and next 30 seconds but none of the Pins matched with the token on my IPhone.

Thank you very much for your help!

I will let you know if find a solution,

George

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago - 4 years 2 months ago #305 by Bruce Armstrong
Bruce Armstrong replied the code: Two Factor Authentication
Verify that the time and timezone are correct on the server you're deploying to. If it's off by more than 30 seconds, you likely won't get the correct PIN values because they use the current UTC unix epoch time as part of the calculation. Part of the powerscript code is calculating that value based on the date/time/timezone of the machine the code is running on.
Last Edit: 4 years 2 months ago by Bruce Armstrong.

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #304 by George Mikhailovsky
George Mikhailovsky replied the code: Two Factor Authentication
Bruce,
I created both these functions and call them in generatepin(key, counter) function instead of longtobytearray() and counterBlob():

//Convert the counter to byte array and then to blob

of_copylongtobytes( counter, counterBytes )
counterBlob = of_blob( counterBytes )
//longtobytearray ( counter, counterBytes )
//counterBlob = Blob ( counterBytes )

After this generatepin() began return 6-digits pin instead of '000000' but each time these 6 digits are the same and doesn't match digits in DioMobile on my IPhone, At the same, hashBytes array is popuilated with 20 elements.

In C/S application with longtobytearray() and counterBlob() functions everything worked fine. By the way, I have the latest PowerServer 2020.

I would be very appreciated for any ideas,

George

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #303 by George Mikhailovsky
George Mikhailovsky replied the code: Two Factor Authentication
Thank you a lot Bruce,

I will try this workarounds,

George

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago - 4 years 2 months ago #302 by Bruce Armstrong
Bruce Armstrong replied the code: Two Factor Authentication
Read the comments by Rob Stevens on the comment thread on the blog article. There are workarounds for the CopyLongToBytes and Blob functions that don't work the same in web PowerServer.

community.appeon.com/index.php/articles-...uilder#comment-403,0
Last Edit: 4 years 2 months ago by Bruce Armstrong.

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #301 by George Mikhailovsky
George Mikhailovsky replied the code: Two Factor Authentication
Dear Bruce,

Thank you for your great job! I used your twofactorauth.pbl and its objects work without any problems in C/S version of my application. However, when I deployed it as web application, your u_google_authenticator.generatepin() function began to return '000000' instead of real pin.

Is this a problem that can be fixed or your PBL cannot work in web applications?

Best regards,

George Mikhailovsky

Please Log in or Create an account to join the conversation.

More
4 years 5 months ago #292 by Bruce Armstrong
Bruce Armstrong replied the code: Two Factor Authentication

Thierry Garrigues wrote: Hi
Do you have information or code samples to integrate this example with Google's authentication APIs?
Regards


Perhaps you could post your question with additional information about what you're trying to do in the forums.

Please Log in or Create an account to join the conversation.

More
4 years 5 months ago #291 by Thierry Garrigues
Thierry Garrigues replied the code: Two Factor Authentication
Hi
Do you have information or code samples to integrate this example with Google's authentication APIs?
Regards

Please Log in or Create an account to join the conversation.

More
4 years 5 months ago #290 by Bruce Armstrong
Bruce Armstrong replied the code: Two Factor Authentication
>>Regarding two-factor authentication with Google, could you explain which Google web APIs to call to connect to a Google account?

Two factor authentication doesn't use any Google account apis. The only google api call I make at all is to a charting api to generate the QR code.

Please Log in or Create an account to join the conversation.

Moderators: Appeon Administrator