OXYGENHUB

Releases 1

OxygenHub 0.9.21 v0.9.21 · ✔ signed by Andy McCall · andymccall ·

Trust and audit
  • Added: your phone as the second factor, and the sudo step (issue #356). With two-factor sign-in on, the OxygenHub app can add the phone as a second factor (its Keystore key, opened by your fingerprint, face or PIN; adding it needs a current app code). Signing in then shows a two-digit number and waits: the phone offers three, you pick the one shown and confirm, and the browser carries on, with "Use a code instead" always there. A wrong number is a no. Before sensitive changes (password, two-factor settings, keys, tokens, secrets, webhooks, collaborators, deleting or transferring a repository, anything under Administration) a session that has not proved a second factor in 15 minutes is asked again at /sudo: the phone, a code, or the password for an account without two-factor. Settings › Security lists the phones; turning app codes off removes them. API: /api/v1/user/authenticators, /api/v1/user/approvals; migration 0104.

Assets