Gembok Authenticator
Gembok Authenticator is software based (virtual) authenticator to generate 2-Steps authentication token using browser. It is written in HTML and Javascript so it should works on Google Chrome, Firefox, Safari and other browsers. It uses simple JSON file to store all data which needed to generate the token.
How to Run
Clone this repository or download archived version from GitHub and then save it to your local machine. To run Gembok Authenticator simply open file src/index.html using your browser and you're ready to go.
As an alternative you can download directly index.html from release page using following URL.
https://github.com/rioastamal/gembok/releases/download/v1.0/index.html
Create JSON File
Gembok Authenticator uses JSON file to display providers and its token. Take a look at sample below to get started.
[
{
"provider": "Google",
"description": "Main account",
"secret": "I5XW6Z3MMUQG2YLJNYQGCY3D",
"period": 30,
"digits": 6,
"algorithm": "SHA1",
"indicatorColor": "red"
},
{
"provider": "AWS",
"description": "Root account ([email protected])",
"secret": "IFLVG4TPN52GCY3D",
"indicatorColor": "orange"
},
{
"provider": "Twitter",
"description": "[email protected]",
"secret": "KR3WS5DUMVZC4Y3PNVVG62DO",
"indicatorColor": "#1DA1F2"
},
{
"provider": "Facebook",
"description": "Foo account",
"secret": "IZQWGZLCN5XWWLTD",
"indicatorColor": "#4267B2"
}
]
The only required attributes are provider and secret the rest are optional.
Save the JSON file and then use Open File... menu to load the file. You should now see 4 items being displayed.
Build
The build process will generate single HTML file of the editor. It may useful if you want use it on another machine because it will be more portable.
$ bash build.sh
Build file build/index.html complete.
You can try to open file build/index.html using web browser.
Extra Security
If you're paranoid then you may want to encrypt your JSON file using other encryption tools such as OpenSSL or PGP. Just before you want to load it on Gembok Authenticator you need to decrypt the file first.
Compatibility
Gembok Authenticator uses the same algorithm as most software based authenticator such as Google Authenticator. Based on my personal limited test using various services such as Twitter and AWS I found no issue.
Credits
Gembok Authenticator uses following library.
ChangeLog
v1.0
- Initial release of Gembok Authenticator (2021/08/03)
Author
This application is written by Rio Astamal <[email protected]>
License
This application is open source licensed under MIT license.
