MFA Protect
===========

This extension lets you force the use of a recent MFA token before
rendering a content element.

This may be used together with standard access restrictions in TYPO3
such as being part of one or more Frontend user groups.

This screenshot shows how a given content element will be protected:

.. figure:: https://raw.githubusercontent.com/xperseguers/t3ext-mfa-protect/master/Documentation/Images/protected-content.png
   :alt: Protected content

   Protected content

Installation
------------

Install the extension either from `TYPO3 Extension Repository
(TER) <https://extensions.typo3.org/extension/mfa_protect/>`__, or from
packagist.org with Composer:

.. code:: bash

   composer require causal/mfa-protect

In addition, you will need some extension adding support for Frontend
MFA. At the time of writing, the only one the author can think of is its
own extension
`EXT:mfa_frontend <https://extensions.typo3.org/extension/mfa_frontend>`__.

You may install it either from TER as well, or with Composer:

.. code:: bash

   composer require causal/mfa-frontend

Configuration
-------------

Include the static template “Protect MFA” to your (main) TypoScript
template.

You can then use the Constants Editor or pure TypoScript to override the
template location and the validity of the MFA token (it defaults to 30
minutes).

**Hint:** the validity of the MFA token supports
`stdWrap <https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Stdwrap.html>`__
:-)

Usage
-----

Edit any content element, switch to Access and toggle the MFA protect
flag. That’s it!

.. figure:: https://raw.githubusercontent.com/xperseguers/t3ext-mfa-protect/main/Documentation/Images/access-flag.png
   :alt: Access Flag

   Access flag