mirror of
https://github.com/plausible/analytics.git
synced 2024-12-28 12:01:39 +03:00
da0fa6c355
* Add 2FA actions to `AuthController` * Hook up new `AuthController` actions to router * Add `qr_code` to project dependencies * Implement generic `qr_code` component rendering SVG QR code from text * Implement enabled and disabled 2FA setting state in user settings view * Implement view for initiating 2FA setup * Implement view for verifying 2FA setup * Implement view for rendering generated 2FA recovery codes * Implement view for verifying 2FA code * Implement view for verifying 2FA recovery code * Improve `input_with_clipboard` component * Improve view for initiating 2FA setup * Improve verify 2FA setup view * Implement `verify_2fa_input` component * Improve view for verifying 2FA setup * Improve view rendering generated 2FA recovery codes * Use `verify_2fa_input` component in verify 2FA view * Do not render PA contact on self-hosted instances * Improve flash message phrasing on generated recovery codes * Add byline with a warning to disable 2FA modal * Extract modal to component and move 2FA components to dedicated module * First pass on loading state for "generate new codes" * Adjust modal button logic * Fix button in verify_2fa_input component * Use button component in activate view * Implement wait states for recovery code related actions properly * Apply rate limiting to 2FA verification * Log failed 2FA code input attempts * Add ability to trust device and skip 2FA for 30 days * Improve styling in dark mode * Fix waiting state under Chrome and Safari * Delete trust cookie when disabling 2FA * Put 2FA behind a feature flag * Extract 2FA cookie deletion * ff fixup * Improve session management during 2FA login * Extract part of 2FA controller logic to a separate module and clean up a bit * Clear 2FA user session when rate limit hit * Add id to form in verify 2FA setup view * Add controller tests for 2FA actions and login action * Update CHANGELOG.md * Use `full_build?()` instead of `@is_selfhost` removed after rebase * Update `Auth.TOTP` moduledoc * Add TOTP token management and make `TOTP.enable` more test-friendly * Use TOTP token for device trust feature * Use zero-deps `eqrcode` instead of deps-heavy `qr_code` * Improve flash messages copy Co-authored-by: hq1 <hq@mtod.org> * Make one more copy improvement Co-authored-by: hq1 <hq@mtod.org> * Fix copy in remaining spots * Change redirect after login to accept URLs from #3560 (h/t @aerosol) * Add tests checking handling login_dest on login and 2FA verification * Fix regression in email activation form submit button behavior * Rename `PlausibleWeb.TwoFactor` -> `PlausibleWeb.TwoFactor.Session` * Move `qr_code` component under `Components.TwoFactor` * Set domain and secure options for new cookies --------- Co-authored-by: hq1 <hq@mtod.org>
50 lines
2.3 KiB
Plaintext
50 lines
2.3 KiB
Plaintext
<div class="w-full max-w-3xl mt-4 mx-auto flex">
|
|
<div class="w-full max-w-lg mx-auto bg-white dark:bg-gray-800 shadow-md rounded px-8 py-6 mb-4 mt-8">
|
|
<h2 class="text-xl font-black dark:text-gray-100">
|
|
<%= if @from_setup do %>
|
|
Setup Two-Factor Authentication
|
|
<% else %>
|
|
Your New Recovery Codes
|
|
<% end %>
|
|
</h2>
|
|
|
|
<div class="text-sm mt-2 text-gray-500 dark:text-gray-200 leading-tight">
|
|
Use these recovery codes to log in if you lose access to the authenticator application. Store them somewhere safe!
|
|
<div
|
|
id="recovery-codes-list"
|
|
class="font-mono border-2 border-dotted border-gray-200 dark:border-gray-700 rounded-md text-gray-600 dark:text-gray-200 text-lg bg-gray-100 dark:bg-gray-900 p-2 mt-6 flex flex-wrap"
|
|
>
|
|
<%= for code <- @recovery_codes do %>
|
|
<div class="basis-1/2 text-center"><%= code %></div>
|
|
<% end %>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="mt-6 flex sm:flex-row flex-col justify-between">
|
|
<button onclick="print(); event.stopPropagation();" id="print" class="button">
|
|
Print Codes <Heroicons.printer class="h-4 w-4 ml-2 mt-1" />
|
|
</button>
|
|
<button
|
|
onclick="var list = document.getElementById('recovery-codes-list'); var selection = getSelection(); selection.removeAllRanges(); var range = createRange(); range.selectNodeContents(list); selection.addRange(range); document.execCommand('copy'); selection.removeAllRanges(); event.stopPropagation(); document.getElementById('copy-base-icon').classList.add('hidden'); document.getElementById('copy-done-icon').classList.remove('hidden'); setTimeout(function() { document.getElementById('copy-done-icon').classList.add('hidden'); document.getElementById('copy-base-icon').classList.remove('hidden'); }, 2000)"
|
|
id="copy"
|
|
class="button sm:mt-0 mt-3"
|
|
>
|
|
Copy to Clipboard
|
|
<span id="copy-base-icon">
|
|
<Heroicons.document_duplicate class="h-4 w-4 ml-2 mt-1" />
|
|
</span>
|
|
<span id="copy-done-icon" class="hidden">
|
|
<Heroicons.check class="h-4 w-4 ml-2 mt-1" />
|
|
</span>
|
|
</button>
|
|
<button
|
|
id="finish"
|
|
class="button sm:mt-0 mt-3"
|
|
onclick={"location.replace('#{Routes.auth_path(@conn, :user_settings) <> "#setup-2fa"}')"}
|
|
>
|
|
Finish
|
|
</button>
|
|
</div>
|
|
</div>
|
|
</div>
|