PHP Google Auth 2FA (student example, bbc)

Google2FA-Auth-example.md

Installing

composer require pragmarx/google2fa
composer require bacon/bacon-qr-code

setup.php

<?php

use PragmaRX\Google2FA\Google2FA;

$google2fa = new Google2FA();

// save userSecret in db
$userSecret = $google2fa->generateSecretKey();

// link to img src
$inlineUrl = $google2fa->getQRCodeInline(
    'TestOrganisation',
    'test@organisation.com',
    $secret
);

validate.php

<?php

use PragmaRX\Google2FA\Google2FA;

$google2fa = new Google2FA();

// saved userSecret from db
$userSecret = $user->get2faSecret();

// entered code
$validationCode = $input->getData();

// only current code is valid
$numberOfAllowedByGoneCodes = 0;

// (in)valid
var_dump(
    $google2fa->verifyKey(
        $userSecret,
        $validationCode,
        $numberOfAllowedByGoneCodes
    )
);