discourse/app/views/users
Jeff Wong f4f8a293e7 FEATURE: Implement 2factor login TOTP
implemented review items.

Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds.
I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail.
Translatable texts.
Move second factor logic to a helper class.
Move second factor specific controller endpoints to its own controller.
Move serialization logic for 2-factor details in admin user views.
Add a login ember component for de-duplication
Fix up code formatting
Change verbiage of google authenticator

add controller tests:
second factor controller tests
change email tests
change password tests
admin login tests

add qunit tests - password reset, preferences

fix: check for 2factor on change email controller
fix: email controller - only show second factor errors on attempt
fix: check against 'true' to enable second factor.

Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP

add two factor to email signin link

rate limit if second factor token present

add rate limiter test for second factor attempts
2018-02-21 09:04:07 +08:00
..
omniauth_callbacks Remove unused code lines 2017-12-29 12:32:18 +05:30
_auto_redirect_home.html.erb FIX: automatic redirect after activating account on subfolder installs 2015-12-15 14:46:35 -05:00
activate_account.html.erb FEATURE: remove obsolete settings ga_tracking_code and ga_domain_name. Use ga_universal_tracking_code and ga_universal_domain_name instead. 2017-11-01 11:41:51 -04:00
admin_login.html.erb FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00
confirm_admin.html.erb FIX: grant admin on subfolder 2017-10-27 16:46:02 -04:00
password_reset.html.erb FEATURE: remove obsolete settings ga_tracking_code and ga_domain_name. Use ga_universal_tracking_code and ga_universal_domain_name instead. 2017-11-01 11:41:51 -04:00
perform_account_activation.html.erb FEATURE: add clean support for running Discourse in a subfolder 2015-03-09 13:14:29 +11:00
send_activation_email.html.erb Add a link that allows you to send activation email again 2013-02-22 11:49:58 -05:00
show.html.erb don't force SiteSetting.title into meta title tag 2017-06-12 13:50:50 -04:00