I implemented Yubikey authentication for Typo, a blogging engine. The
patch I created can be downloaded
here. This patch was created against revision 1782 of the project and should work fine against the most recent release on their site (5.1.2).
After applying the patch to an existing installation of Typo, you need to go to your blogs directory and run the rake tool to update the database:
rake db:migrate
Then, you can log in normally and edit Yubikey authentication settings for the whole blog under the "Settings" >> "General Settings" tab. Here you can enable/disable Yubikey authentication; as well as, specify your web services API key & ID. When editing an individual user under the "Users" tab, you can enable Yubikey authentication for only that user account and specify his particular Yubikey's public ID. In this implementation, I am using the first 12 characters of your Yubikey's output as the public ID. Note: If Yubikey authentication is not enabled under "General Settings," the Yubikey-specific fields on the login screen will not be shown; however, user-specific Yubikey use rsettings will appear.
Three screenshots of the app after applying the patch are attached to this post.
I'd be thrilled to get any kind of feedback on how this works for you. Also, I'll be happy to answer any questions regarding implementing this patch. Hopefully, this patch will find its way into the Typo project trunk.
-D