Skip to content

Update README.md with v4 and security infos #57

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tobiasgruber merged 1 commit into from
Jul 10, 2026
Merged

Update README.md with v4 and security infos #57

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 8 additions & 5 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,8 @@ Extend the Neos backend login to support second factors and passwordless passkey
TOTP tokens (Authenticator apps) and WebAuthn / FIDO2 passkeys — both platform authenticators
(Touch ID, Windows Hello) and hardware security keys (e.g. Yubikey).

> ⚠️ **Security Notice:** Versions prior to `4.0.0` are affected by a security vulnerability in the underlying `web-authn-lib` dependency used for WebAuthn/FIDO2 second-factor authentication. This has been fixed in v4. **Please upgrade to v4 or later immediately** — see [PR #56](https://github.com/sandstorm/NeosTwoFactorAuthentication/pull/56) for details.

## What this package does

This package allows all users to register multiple second factors — either a user- and passwordless **Passkey**, or a second factor in addition to their username and password. Second factors can be **TOTP tokens** (Authenticator App) or **passkeys** (WebAuthn / FIDO2: a platform authenticator such as Touch ID or
Expand Down Expand Up @@ -124,11 +126,12 @@ verification — independent of the `userVerification` setting.

## Versioning Scheme

| Package Version | Neos / Flow Version | Released? | Supported | Remarks |
| --------------- | ------------------- | --------- | --------- |---------------|
| 3.x | 9.x, 8.x. | ✅ | ✅ | `main` branch |
| 2.x | 9.x, 8.x, 7.x | ✅ | | `main` branch |
| 1.x | 9.x, 8.x, 7.x, 3.x | ✅ | | |
| Package Version | Neos / Flow Version | Supported | Remarks |
| --------------- | ------------------- | --------- |---------------|
| 4.x | 9.x, 8.x. | ✅ | `main` branch |
| 3.x | 9.x, 8.x. | | |
| 2.x | 9.x, 8.x, 7.x | | |
| 1.x | 9.x, 8.x, 7.x, 3.x | | |

## Settings

Expand Down