[phpMyAdmin Developers] GuardianKey plugin to phpMyAdmin
Gesiel Bernardes <[email protected]> Thu, 14 Nov 2019 14:44:13 -0300
| Newsgroups | gmane.comp.php.phpmyadmin.devel |
|---|---|
| Message-ID | <CADAE32Ny2_9rB+YmOFDjaBoJzFu=i2tQYdhwqMkCEDiYY_yT+A@mail.gmail.com> |
--===============1491648649823355227==
Content-Type: multipart/alternative; boundary="0000000000003c47f405975208b4"
--0000000000003c47f405975208b4
Content-Type: text/plain; charset="UTF-8"
HI Everyone,
We are trying create a GuardianKey plugin to phpMyAdmin. However, we have
doubts related to the best way to do this and the best point in the code
for this integration.
GuardianKey is a solution to protect systems against authentication
attacks. It uses Artificial Intelligence and analyses the user's behavior,
threat intelligence and psychometrics (or behavioral biometrics). The
protected system (in the concrete case, phpMyAdmin) must send an event via
REST for the GuardianKey on each login attempt. More info at
https://guardiankey.io/services/guardiankey-auth-security-lite/ .
The best way to integrate would be on having a hook in the procedure that
process the user credentials submission in phpMyAdmin (the script that
receives the POST), something such as:
if(POST IN AUTH FORM) {
boolean loginFailed = checkLogin();
GuardianKeyEvent event = createEventForGuardianKey(username,loginFailed);
boolean GuardianKeyValidation = checkGuardianKeyViaREST(event);
if(GuardianKeyValidation){
// Allow access
} else {
// Deny access
}
}
Where is the best place to create this integration? Is there a way to
create a hook for this purpose? Should we create an extension?
Any help is welcome.
Thank you in advance.
Best regards,
Gesiel
--0000000000003c47f405975208b4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">HI Everyone,<div><br></div><div>We are trying create a Gua=
rdianKey plugin to phpMyAdmin. However, we have doubts related to the best =
way to do this and the best point in the code for this integration.<br><br>=
GuardianKey is a solution to protect systems against authentication attacks=
. It uses Artificial Intelligence and analyses the user's behavior, thr=
eat intelligence and psychometrics (or behavioral biometrics). The protecte=
d system (in the concrete case, phpMyAdmin) must send an event via REST for=
the GuardianKey on each login attempt. More info at <a href=3D"https://gua=
rdiankey.io/services/guardiankey-auth-security-lite/">https://guardiankey.i=
o/services/guardiankey-auth-security-lite/</a> .<br><br>The best way to int=
egrate would be on having a hook in the procedure that process the user cre=
dentials submission in phpMyAdmin (the script that receives the POST), some=
thing such as:<br><br>if(POST IN AUTH FORM) {<br>boolean loginFailed =3D ch=
eckLogin();<br>GuardianKeyEvent event =3D createEventForGuardianKey(usernam=
e,loginFailed);<br>boolean GuardianKeyValidation =3D checkGuardianKeyViaRES=
T(event);<br>if(GuardianKeyValidation){<br>// Allow access<br>} else {<br>/=
/ Deny access<br>}<br>}<br><br>Where is the best place to create this integ=
ration? Is there a way to create a hook for this purpose? Should we create =
an extension?<br><br>Any help is welcome.<br><br>Thank you in advance.<br><=
br>Best regards,<br>Gesiel<br></div></div>
--0000000000003c47f405975208b4--
--===============1491648649823355227==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KRGV2ZWxvcGVy
cyBtYWlsaW5nIGxpc3QKRGV2ZWxvcGVyc0BwaHBteWFkbWluLm5ldApodHRwczovL2xpc3RzLnBo
cG15YWRtaW4ubmV0L21haWxtYW4vbGlzdGluZm8vZGV2ZWxvcGVycwo=
--===============1491648649823355227==--