discourse/config
Jeff Wong f4f8a293e7 FEATURE: Implement 2factor login TOTP
implemented review items.

Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds.
I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail.
Translatable texts.
Move second factor logic to a helper class.
Move second factor specific controller endpoints to its own controller.
Move serialization logic for 2-factor details in admin user views.
Add a login ember component for de-duplication
Fix up code formatting
Change verbiage of google authenticator

add controller tests:
second factor controller tests
change email tests
change password tests
admin login tests

add qunit tests - password reset, preferences

fix: check for 2factor on change email controller
fix: email controller - only show second factor errors on attempt
fix: check against 'true' to enable second factor.

Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP

add two factor to email signin link

rate limit if second factor token present

add rate limiter test for second factor attempts
2018-02-21 09:04:07 +08:00
..
cloud/cloud66 Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
environments rename 'min_private_message_{post/title}_length' to 'min_personal_message_{post/title}_length' 2018-02-01 13:25:29 +05:30
initializers FIX: Server didn't use default_locale as fallback locale 2018-01-25 14:57:41 +01:00
locales FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00
application.rb PERF: run post timings in background 2018-01-19 08:27:29 +11:00
boot.rb minor changes to discourse bench 2018-02-20 14:41:21 +11:00
cdn.yml.sample
database.yml Support user defined postgres timeouts 2017-10-27 09:59:44 -04:00
deploy.rb.sample enough with the malloc limit, not needed 2016-05-25 21:09:07 +10:00
discourse_defaults.conf FEATURE: Shorten setting name to max_reqs 2018-01-22 13:18:30 +11:00
discourse.config.sample enough with the malloc limit, not needed 2016-05-25 21:09:07 +10:00
discourse.pill.sample
environment.rb prevent the application from starting in development mode when SMTP settings are changed 2016-06-03 17:39:54 +02:00
logrotate.conf
multisite.yml.production-sample
nginx.global.conf
nginx.sample.conf FIX: Support old Service Worker source file path to avoid routing errors. 2018-02-19 08:04:45 +08:00
projections.json
puma.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
routes.rb FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00
sidekiq.yml Opps no reason to limit this to 1. 2017-09-29 08:19:35 +08:00
site_settings.yml New setting: minimum trust level to embed images in a post 2018-02-20 20:00:06 -05:00
spring.rb
thin.yml.sample
unicorn_launcher
unicorn_upstart.conf enough with the malloc limit, not needed 2016-05-25 21:09:07 +10:00
unicorn.conf.rb More control over Unicorn logstash logger. 2017-11-15 12:28:36 +08:00