svc/totp-bundle

Userinterface for the excellent SchebTwoFactorBundle

6.6.1 2025-11-03 13:33 UTC

Requires

• php: ^8.4
• doctrine/doctrine-bundle: ^2.10 | ^3
• doctrine/orm: ^2.11 | ^3
• endroid/qr-code-bundle: ^6
• scheb/2fa-backup-code: ^7.0
• scheb/2fa-bundle: ^7.10
• scheb/2fa-totp: ^7.10
• scheb/2fa-trusted-device: ^7.10
• symfony/framework-bundle: ^7.2
• symfony/mailer: ^7.2
• symfony/rate-limiter: ^7.2
• symfony/translation: ^7.2
• symfony/twig-bundle: ^7.2
• symfonycasts/verify-email-bundle: ^1.10

Requires (Dev)

• phpstan/phpstan: ^2.1
• phpunit/phpunit: ^12.3

MIT

• Sven Vetter

README

⚠️ Version Compatibility:

• Version 6.x (current): Requires Symfony 7.2+, PHP 8.4+
• Version 5.x: Compatible with Symfony 6.4 and 7.x, PHP 8.2+
• Version 4.x: Compatible with Symfony 6.1+
• Version 1.x: For older Symfony installations

Breaking Changes:

• Version 6.4.0+: All state-changing operations now require CSRF protection and POST methods. See Usage documentation for migration details.
• Version 6.6.0 (2025-01): HTTP method restrictions enforced on all routes. Rate limiting requires symfony/rate-limiter dependency and manual configuration. Non-nullable $backupCodes array type in trait. See Configuration documentation for details.

Userinterface for the excellent SchebTwoFactorBundle

SchebTwoFactorBundle provides the functions to implement simple 2FA. However, you have to create the user interface yourself.

This small bundle provides a ready to use implementation.

The following functions are enabled:

• TOTP
• Backup codes
• Trusted devices

Installation and configuration

• Installation
• Configuration
• Usage
• Security Features
• Logging

Screenshots

Enable 2FA

Disable 2FA

Backup codes

Enter 2FA code