Configure 2FA For MediaWiki

How to use OATHAuth in Mediawiki

Configure OATHAuth

To configure your Mediawiki instance to allow users to enable two-factor authentication simply add

wfLoadExtension( 'OATHAuth' );

to the end of the LocalSettings.php file located in the root of the MediwWiki directory. Restart your HTTP server. In my case I simply run

sudo systemctl restart httpd

Install oathtool

There are a number of OATH clients on the market, but I decided to just install the oathtool command line tool on my Fedora based laptop, by running

sudo dnf install oathtool.x86_64

Apple has the same functionality built into the Passwords app, but as I only login from my Fedora based laptop, it's easier to run a command and copy the output to my clipboard.

I'll document how to register for 2FA here tomorrow. It's too late tonight.

I then run

oathtool --base32 --totp "REGISTERED KEY GOES HERE"

Which generates a 6 digit code to give to mediawiki when prompted.