This PSR4 package provide u2f protocol integration in laravel 5 framework.

• A top level domain
• HTTPS

• = PHP 7.1 (If you want to use this package en php 5 you need to use the version v1.1.0)

Via Composer

$ composer require lahaxearnaud/laravel-u2f

Laravel 5.5 uses Package Auto-Discovery, so doesn't require you to manually add the ServiceProvider.

$ php artisan vendor:publish --provider="Lahaxearnaud\U2f\U2fServiceProvider" --tag=u2f-config

$ php artisan vendor:publish --provider="Lahaxearnaud\U2f\U2fServiceProvider" --tag=u2f-components

$ php artisan vendor:publish --provider="Lahaxearnaud\U2f\U2fServiceProvider" --tag=u2f-views

Note that default views use Laravel's default Bootstrap 4. If you don't use it, you have to update the views.

$ php artisan vendor:publish --provider="Lahaxearnaud\U2f\U2fServiceProvider" --tag=u2f-migrations
$ php artisan migrate

In the app/Http/Kernel.php file

 protected $routeMiddleware = [
        'auth' => \App\Http\Middleware\Authenticate::class,
// ...
        'u2f' => \Lahaxearnaud\U2f\Http\Middleware\U2f::class,
    ];

A example projet is available to help you with the configuration / usage.

In the route.php file add the u2f middleware on your routes or groups:

    Route::get('admin/profile', ['middleware' => ['auth', 'u2f'], function () {
        //
    }]);

In controller:

    /**
     * Create a new controller instance.
     *
     * @return void
     */
    public function __construct()
    {
        $this->middleware(['auth', 'u2f']);
    }

• Name: u2f.authentication

  Payload: [ 'u2fKey' => $key, 'user' => Auth::user() ]

  Description: An user authenticate himself with a valid u2f key

• Name: u2f.register

  Payload [ 'u2fKey' => $key, 'user' => Auth::user() ]

  Description: An user register a new u2f key

Please see CHANGELOG for more information what has changed recently.

If you discover any security related issues, please email lahaxe[dot]arnaud[at]gmail[dot]com instead of using the issue tracker.

• Arnaud LAHAXE
• Mike Robinson
• Chakphanu Komasathit
• Anne Jan Brouwer
• Alexis Saettler
• Thomas Lété

The MIT License (MIT). Please see License File for more information.

What better way to relax, after spending hours coding, than a good cocktail on the terrace?