Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-79679

Upgrade Constant-Time Encoding to 3.0.0

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Fixed
    • Icon: Minor Minor
    • 5.0
    • 4.4, 5.0
    • Libraries
    • MOODLE_404_STABLE, MOODLE_500_STABLE
    • MOODLE_500_STABLE
    • MDL-79679_upgrade-constant-time
    • Hide

      Test are also covered by unittest.

      (Partly copied from MDL-78509)

      Testing

      In this part will be testing each factor along with setting up the configuration.

      Warning: If you have inadvertantly messed things up and locked yourself out, you can disable the whole MFA plugin from the CLI:

      php admin/cli/cfg.php --component=tool_mfa --name=enabled --set=0

      Note: Please use two different browsers for testing otherwise you will be locked by a specific factor

      1. One is for the configuration called "Site admin"
      2. The second second browser is for testing called "Testing".

      TOTP factor test (Authenticator app) - Only applied to Admins

      1. Go to Site admin > plugins > admin tools
      2. Enable the Authenticator app factor and just leave the default Settings
      3. Still in "Site admin" browser, click on user profile picture in header, the click on Preferences
      4. Click on Multi-factor authentication preferences in User account block
      5. Look for Authenticator app block under Available factors the click on the Setup App button
        1. Set Device label to any names (This field is required)
        2. Scan the QR code displayed in that page using any authenticator app
        3. Once it's added, you will get code from the app
        4. Enter the code from the app in Enter verification code for confirmation then save changes
      6. Go to "Testing" browser and login as admin
      7. Verify that you are taken to a page where you need to enter the code from the authenticator app and enter the code in Enter verification code for confirmation
      8. Verify that once the code is entered, you are taken straight to home page without pressing the Verify code button
      Show
      Test are also covered by unittest. ( Partly copied from MDL-78509 ) Testing In this part will be testing each factor along with setting up the configuration. Warning : If you have inadvertantly messed things up and locked yourself out, you can disable the whole MFA plugin from the CLI : php admin/cli/cfg.php --component=tool_mfa --name=enabled --set=0 Note : Please use two different browsers for testing otherwise you will be locked by a specific factor One is for the configuration called "Site admin" The second second browser is for testing called "Testing". TOTP factor test (Authenticator app) - Only applied to Admins Go to Site admin > plugins > admin tools Enable the Authenticator app factor and just leave the default Settings Still in "Site admin" browser, click on user profile picture in header, the click on Preferences Click on Multi-factor authentication preferences in User account block Look for Authenticator app block under Available factors the click on the Setup App button Set Device label to any names (This field is required) Scan the QR code displayed in that page using any authenticator app Once it's added, you will get code from the app Enter the code from the app in Enter verification code for confirmation then save changes Go to "Testing" browser and login as admin Verify that you are taken to a page where you need to enter the code from the authenticator app and enter the code in Enter verification code for confirmation Verify that once the code is entered, you are taken straight to home page without pressing the Verify code button
    • Hide

      Code verified against automated checks.

      Checked MDL-79679 using repository: https://github.com/ziegenberg/moodle

      More information about this report

      Built on: Tue 22 Oct 2024 12:10:17 PM UTC

      Show
      Code verified against automated checks. Checked MDL-79679 using repository: https://github.com/ziegenberg/moodle main (0 errors / 0 warnings) [branch: MDL-79679_upgrade-constant-time | CI Job ] More information about this report Built on: Tue 22 Oct 2024 12:10:17 PM UTC

      Constant-Time Encoding    admin/tool/mfa/factor/totp/extlib/ParagonIE/ConstantTime    2.1.1  -->  3.0.0    https://github.com/paragonie/constant_time_encoding

            Daniel Ziegenberg Daniel Ziegenberg
            sarjona Sara Arjona (@sarjona)
            Safat Shahin Safat Shahin
            Jun Pataleta Jun Pataleta
            Ron Carl Alfon Yu Ron Carl Alfon Yu
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 2 hours, 58 minutes
                2h 58m

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.