discourse/app/assets/javascripts/admin/models
Jeff Wong f4f8a293e7 FEATURE: Implement 2factor login TOTP
implemented review items.

Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds.
I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail.
Translatable texts.
Move second factor logic to a helper class.
Move second factor specific controller endpoints to its own controller.
Move serialization logic for 2-factor details in admin user views.
Add a login ember component for de-duplication
Fix up code formatting
Change verbiage of google authenticator

add controller tests:
second factor controller tests
change email tests
change password tests
admin login tests

add qunit tests - password reset, preferences

fix: check for 2factor on change email controller
fix: email controller - only show second factor errors on attempt
fix: check against 'true' to enable second factor.

Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP

add two factor to email signin link

rate limit if second factor token present

add rate limiter test for second factor attempts
2018-02-21 09:04:07 +08:00
..
admin-dashboard.js.es6 REFACTOR: Remove Discourse.Ajax 2016-07-11 12:57:05 -04:00
admin-user.js.es6 FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00
api-key.js.es6 REFACTOR: Remove requirejs calls 2017-07-05 17:24:27 -04:00
backup-status.js.es6 FIX: backups index template wasn't properly bound 2015-08-17 16:21:23 +02:00
backup.js.es6 SECURITY: CSRF vulnerabilities in Admin::BackupsController. 2017-03-23 10:29:35 +08:00
color-scheme-color.js.es6 Revert "Revert "REFACTOR: support booting discourse with DISCOURSE_NO_CONSTANTS"" 2015-11-21 12:27:06 +11:00
color-scheme.js.es6 FEATURE: allow copying of color schemes to clipboard 2017-04-18 09:37:55 -04:00
email-log.js.es6 REFACTOR: Remove Discourse.Ajax 2016-07-11 12:57:05 -04:00
email-preview.js.es6 FIX: Populate the Email Digest preview with the current username 2017-06-28 15:38:57 -04:00
email-settings.js.es6 REFACTOR: Remove Discourse.Ajax 2016-07-11 12:57:05 -04:00
email-template.js.es6 REFACTOR: Remove Discourse.Ajax 2016-07-11 12:57:05 -04:00
flag-type.js.es6 FEATURE: View flags grouped by topic 2017-09-25 12:25:14 -04:00
flagged-post.js.es6 FEATURE: New modal to show flags received for a user 2018-01-17 15:08:08 -05:00
incoming-email.js.es6 FEATURE: Allow checking the raw response of a bounced email 2017-02-22 14:51:33 -03:00
permalink.js.es6 REFACTOR: Remove Discourse.Ajax 2016-07-11 12:57:05 -04:00
report.js.es6 FIX: graphs should go to zero for missing dates 2018-01-15 10:16:34 +05:30
screened-email.js.es6 REFACTOR: Remove Discourse.Ajax 2016-07-11 12:57:05 -04:00
screened-ip-address.js.es6 REFACTOR: Remove Discourse.Ajax 2016-07-11 12:57:05 -04:00
screened-url.js.es6 REFACTOR: Remove Discourse.Ajax 2016-07-11 12:57:05 -04:00
site-setting.js.es6 Can't revert due to incompatibility of new site setting types. 2017-08-07 10:43:09 +09:00
site-text.js.es6 REFACTOR: Remove Discourse.Ajax 2016-07-11 12:57:05 -04:00
staff-action-log.js.es6 FIX: ESlint 2018-02-13 16:06:40 -05:00
theme.js.es6 oops my linter is not running automatically 2017-05-10 16:09:33 -04:00
tl3-requirements.js.es6 FEATURE: make trust level 3 time period admin setting 2015-12-22 23:26:19 +05:30
user-field.js.es6 ES6ify some of the remaining files 2015-08-10 10:21:05 -04:00
version-check.js.es6 REFACTOR: Avoid duplicated logic on server and client. 2017-11-21 17:10:04 +08:00
watched-word.js.es6 FEATURE: Support regular expressions for watched words 2017-09-27 15:48:57 -04:00
web-hook.js.es6 FIX: Group owners should be able to invite users to their groups. 2017-07-21 23:48:25 +09:00