discourse/lib/guardian
Jeff Wong f4f8a293e7 FEATURE: Implement 2factor login TOTP
implemented review items.

Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds.
I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail.
Translatable texts.
Move second factor logic to a helper class.
Move second factor specific controller endpoints to its own controller.
Move serialization logic for 2-factor details in admin user views.
Add a login ember component for de-duplication
Fix up code formatting
Change verbiage of google authenticator

add controller tests:
second factor controller tests
change email tests
change password tests
admin login tests

add qunit tests - password reset, preferences

fix: check for 2factor on change email controller
fix: email controller - only show second factor errors on attempt
fix: check against 'true' to enable second factor.

Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP

add two factor to email signin link

rate limit if second factor token present

add rate limiter test for second factor attempts
2018-02-21 09:04:07 +08:00
..
category_guardian.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
ensure_magic.rb
group_guardian.rb Remove use of deprecated site setting. 2018-02-12 14:26:22 +08:00
post_guardian.rb FIX: Couldn't like staff when allow_flagging_staff was set 2018-02-14 15:46:04 -05:00
post_revision_guardian.rb
tag_guardian.rb FEATURE: tag groups 2016-06-06 14:18:48 -04:00
topic_guardian.rb FEATURE: Allow user to leave a PM. 2017-10-19 12:32:55 +08:00
user_guardian.rb FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00