mclear / sesame Goto Github PK

Add option for 2 factor authentication, ring and password/ring and pin

On a standard Win10 machine without the app .. what you lock the PC .. it goes to a standard lock screen. Upon touching the mouse or keyboard, the machine will switch to account selection / password entry.

When the app is installed and the PC then locked, it switches focus immediately to the account selection. This may be due to the background polling ?

and/or provide a UI to switch between readers

Maz doesn't like Sesame..

Tempted to just put it as "NFC Ring Unlock" and match it up with our other app options that way it's a single point of entry for a user and we can try to have a similar experience across devices.. That said, we don't need "NFC Ring Unlock" moving forwards as it's now native soo.... yea.. Assigning @StyleMaster who probably has more interest in brand stuff than me..

Swiping an unregistered tag multiple times may require you to remotely log into the computer with the correct user name and password in order to reset this.

Currently users only have to ability to remove registered rings and these are shown with a calculated "hash" value. Users should be able to assign/edit friendly names or icons to their registered devices.

Add functionality for events on Ring leave / enter NFC while logged in

Add multiple user functionality to Sesame login.

The app will happily run on a machine without a compatible NFC reader/writer but there is no notification provided to the user to let them know this.

It would be nice to have the option of using the ring and a PIN or some other non-physical token. There are complicated reasons that someone might want to do this but it affects the USA 5th ammendment and what someone there can be compelled to do. Plus it'd kinda be neat.

After a number of invalid PIN guesses, I'd like to write the service to lock / invalidate the encrypted credential and force the use of the original username and password. This way finding someone's token doesn't automatically grant access.

Being able to talk to a reader with is made up by a dev-board such as a Arduino with a NFC-Shield or the like would open up a lot of possibilities for developers creating their own solution, without having to use pre-existing usb-nfcreaders.

This would likely need some sort of protocol to function, with handshake implementation for discovery of said reader.

In some instances with Windows 10 the service will stop after a minute on the lock screen. You then need to log in manually and restart the service.

UI to do this.

Add optional NDEF records for additional security.

Add the ability to select a reader in the UI and only this device will be polled to check for tokens (useful when a laptop has an NFC reader in the palm rest and normal operation locks the PC)

IE where the NFC device is built into the laptop hardware

Suggest leveraging the power of the translatewiki community to provide these