Loading...
 
Skip to main content

2FA information strings in the UI reference Google Authenticator specifically, instead of being generic

Status
Open
Subject
2FA information strings in the UI reference Google Authenticator specifically, instead of being generic
Category
  • Easy for Newbie Dev
Resolution status
Fixed or Solved
Submitted by
Jeff
Lastmod by
Jeff
Rating
(0)
Description

When the TOTP 2FA feature is activated, in the user settings UI, there are explanation strings that reference specifically (and sometimes only) Google Authenticator.

For example, when it first presents you with the QR code it mentions FreeOTP (which is kind of a dead project?) and Google Authenticator. Then, once you have fully enabled the feature in your personal user settings, it says:

"Two-factor authentication is a security measure that requires an extra code when you log in. When enabled, Tiki will require a code from your mobile phone during login. This code is created by the Google Authenticator®."

It is probably not desirable to push users towards the Google solution (and "the Google Authenticator®" sounds really weird, especially without " application" after it). The text strings throughout Tiki's UI for the TOTP 2FA feature could maybe be more generic, and say "authenticator app", maybe accompanied with a "(learn more)" link to https://en.wikipedia.org/wiki/Comparison_of_OTP_applicationsQuestion ?

I have set the difficulty level to "easy" because finding and changing the problematic strings is probably just a matter of doing git grep Google Authenticator, so there wouldn't be a ton of digging involved.

Solution
Workaround
Importance
3
Easy to solve?
10 easy
Priority
30
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
8696
Created
Saturday 28 September, 2024 19:59:01 UTC
by Jeff
LastModif
Wednesday 24 September, 2025 15:44:25 UTC


Show PHP error messages