mward4/OpenMFA
Archived
1
0 Fork 0
Code Issues 1 Actions Packages Projects Releases 3 Wiki Activity

3 Releases 3 Tags

RSS Feed
  • v0.2 04a86ead95
    Compare

    OpenMFA v0.2 Stable

    mward4 released this 2026-09-09 02:08:47 -04:00 | 2 commits to main since this release

    OpenMFA v0.2 — covered codes, service marks, and a log

    Image: gitea.milesward.dev/mward4/openmfa:0.2 (also :latest). Port 8720. Upgrading from v0.1.x: change the tag and apply; vault, key, settings and admin account carry over. A new audit.jsonl appears beside them.

    • Codes are covered until revealed. Each row shows six dots and an eye. Click to reveal: the digits appear with their countdown ring and a copy button, stay for a minute (long enough to survive a rollover), then go back under cover on their own. The reveal is a server-side, per-session window: the browser never receives a code it has not asked for by name, so "covered" is real and every code ever shown has a line in the log.
    • Service marks instead of initials. A bundled pack of ~175 marks (Simple Icons, CC0, plus Font Awesome Free brands for Amazon, AWS, Microsoft, LinkedIn, Slack, Xbox, Salesforce and Yahoo, which Simple Icons no longer carries) matched on the issuer name, then shorter prefixes, then the label's mail domain — so an issuer-less [email protected] gets the Microsoft mark. Unmatched accounts keep the initial tile. otpauth:// links carry no artwork, so this is name matching, not metadata. Marks that would vanish against a theme's tile fall back to ink for that theme.
    • Settings → Log. In the style of Daito: admin revealed GitHub · [email protected], then how long ago | who | from which address. Records what the server did — sign-ins and failed attempts (under the name tried), reveals, accounts added / renamed / removed, delivery and credential changes, test messages. Stored owner-only in audit.jsonl; newest 5,000 kept; paged with Show older.
    • Client addresses come from X-Forwarded-For / X-Real-IP when a reverse proxy sets them, else the TCP peer. In Unraid bridge networking the peer is Docker's gateway for every LAN client; use a proxy or host/br0 networking to see real addresses.
    • Text-only platform picker at setup and in Delivery settings; the coloured dots are gone.

    Tests: 150 (router tests now cover the reveal window, session scoping, and the forwarded address in the log).

    Downloads
  • v0.1.1 3c83cd9928
    Compare

    OpenMFA v0.1.1 Stable

    mward4 released this 2026-09-09 00:47:37 -04:00 | 3 commits to main since this release

    OpenMFA v0.1.1 — monochrome UI

    Image: gitea.milesward.dev/mward4/openmfa:0.1.1 (also :latest). Port 8720.

    • Monochrome accent. The primary colour is ink rather than blue: primary buttons, the floating Add an account button, the empty-state shield, the active settings tab, the switch, the account initials tile and the countdown ring. Light mode uses a deep near-black, dark mode a near-white, in the vein of Daito and Beautiful UI. Status colours (live, expiring, error) and the three platform dots keep their hue because they carry meaning.
    • Monochrome focus glow. Inputs keep their glow on focus, now a neutral halo with a mid-grey edge instead of a blue tint.
    • Settings tabs spaced out. Delivery / Account / About no longer touch: each pill carries a 1px hairline ring outside its box, so the gap was doubled.
    • Publishing tooling. scripts/build-and-publish-unraid.sh writes registry auth into its private Docker config directly instead of docker login / docker logout, which on a Mac shares a keychain item with git and could erase git's Gitea credential. docs/PUBLISHING.md documents the trap.

    Upgrading from v0.1: change the tag and apply. Vault, key, settings and admin account live in the appdata mount and carry over.

    Downloads
  • v0.1 ad3720edbf
    Compare

    OpenMFA v0.1 Stable

    mward4 released this 2026-09-09 00:23:45 -04:00 | 4 commits to main since this release

    OpenMFA v0.1 — first release

    Image: gitea.milesward.dev/mward4/openmfa:0.1. Port 8720.

    • Live TOTP tiles delivered to Discord (webhook), Slack (bot token + channel) or Telegram (bot token + chat id), edited in place every period rather than re-posted.
    • Three-way optional provider picker at setup; Slack Check token and Telegram Detect chat helpers; validators that name the classic mistakes (an xoxp- user token, a #name instead of a channel ID).
    • Google Authenticator export import (otpauth-migration://) with multiple accounts per QR code; QR upload, camera and paste.
    • Encrypted vault (XChaCha20-Poly1305), Argon2id admin password, pure-Rust static musl binary, Unraid template.
    • docs/TEAMS.md: exploration of Microsoft Teams for v0.2.
    Downloads