Skip to content

Add loginOtp plugin: email OTP two-factor authentication for OJS 3.5#21

Closed
monmarzia-archi wants to merge 5 commits into
kabaros:masterfrom
archicoop:master
Closed

Add loginOtp plugin: email OTP two-factor authentication for OJS 3.5#21
monmarzia-archi wants to merge 5 commits into
kabaros:masterfrom
archicoop:master

Conversation

@monmarzia-archi
Copy link
Copy Markdown

New plugin submission

Plugin: Login OTP via Email
Category: Generic
Repository: https://github.com/archicoop/loginOtp
License: GPL v3

Adds two-factor authentication to the login process by sending a 6-digit one-time code via email.

Features:

  • Role-based configuration with hierarchy (highest-privilege role determines the 2FA policy)
  • Brute-force protection (lockout after 5 failed attempts)
  • Flood protection (60-second cooldown)
  • SHA-256 hashed OTP, CSPRNG generation
  • No external dependencies

Tested on OJS 3.5.0.4. English and Italian locales included.

Developed by Archimede Informatica (https://www.archicoop.it).

Adds loginOtp Plugin
Update loginOtp md5 hash for v1.0.0 release
@monmarzia-archi monmarzia-archi marked this pull request as draft June 3, 2026 10:34
Fix a bug in settings and email format
- Add ROLE_NOTES constant to LoginOtpSettingsForm with locale keys
  for each role description
- Pass roleNotes to template in initData() — previously missing,
  causing a PHP fatal error on fresh installs (null passed to
  array_key_exists())
- Restore roleNotes block in settings.tpl
- Add role note locale strings to en and it locale files
Added OMP compatibility
@archicoop archicoop closed this by deleting the head repository Jun 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants