Add 2FA to your logins, back and front office
A two-factor authentication system for Melis — back-office and front-office — with one-time codes delivered by email or SMS (via Primotexto).
// Add two-factor authentication (subscription): composer require melisplatform/melis-login-2fa // One-time codes on top of the password, for BO & FO logins. // Delivery: melis-login-2fa-email (email) or // melis-login-2fa-primotexto (SMS).
Package
Type
Category
Scope
Delivery
Depends on
Overview
A second factor on every login
Two-factor authentication asks for one more proof of identity after the password. Once the username and password are accepted, a short-lived one-time code confirms the person signing in really holds the account — and it covers both the back-office (admin accounts) and the front-office (site user accounts). The code is delivered by email with melis-login-2fa-email, or by SMS through Primotexto with melis-login-2fa-primotexto.
The benefit is simple: a stolen or leaked password is no longer enough to get in, because the attacker also needs the code sent to a channel the real user controls. That protects sensitive admin access and customer accounts alike, and helps meet the security and compliance expectations of clients who require strong authentication.
Key features
Stronger sign-in, both ways
A one-time code on top of the password — for admins and site users, delivered by email or SMS.
Back-office & front-office
Protect both admin and site-user logins.
One-time codes
A short-lived code confirms each sign-in.
Email delivery
Send codes by email out of the box.
SMS delivery
Send codes by SMS via Primotexto.
Stops stolen passwords
A leaked password alone is no longer enough.
Built on Melis Core
Hooks the platform’s login and user system.
See it in action
Password, then a one-time code
After the usual sign-in, a second factor confirms the person really holds the account.
// Login flow with 2FA enabled: // 1. username + password ✓ // 2. one-time code sent → email or SMS (Primotexto) // 3. enter the code ✓ → access granted
Password, then a one-time code
After the usual password, the user enters a short code delivered to a channel they control — so a stolen password alone can’t get in.
- BO admins & FO users
- Code by email or SMS
- Powered by Primotexto for SMS
For developers
How it's wired
Subscription module
Distributed through the private Melis marketplace.
Pluggable delivery
Add melis-login-2fa-email and/or melis-login-2fa-primotexto for the channel.
Hooks Melis Core login
Integrates with the core authentication and user system.
// Subscription. Base: melis-login-2fa. // Channels: melis-login-2fa-email · melis-login-2fa-primotexto (SMS).
Part of Melis Platform
Explore the rest of the platform
Two-factor authentication builds on Melis Core — here are the modules around it.
