Initial mfa support (for internal users) #93591

Merged
Oleg-Komarov merged 46 commits from mfa into main 2024-08-29 11:44:06 +02:00

46 Commits

Author SHA1 Message Date
3439efb9a8 doc update 2024-08-29 11:34:02 +02:00
585dc35274 review fixes 2024-08-29 11:28:58 +02:00
9def65b434 Fix: Template component fields layout checkbox base 2024-08-27 16:04:22 +02:00
f4beaab51e remove useless css class 2024-08-27 13:03:07 +02:00
f62ea85d1f simplify include-with 2024-08-27 12:58:36 +02:00
89d5268948 more css fixes 2024-08-27 12:51:20 +02:00
e90e875c1b rename for consistency 2024-08-27 12:44:13 +02:00
94df1fcd80 some css updates 2024-08-27 12:37:51 +02:00
40f6f0555f show mfa button only to internal users 2024-08-27 12:10:06 +02:00
e442378a03 Merge branch 'main' into mfa 2024-08-27 10:57:30 +02:00
1377addf3e mfa alternatives 2024-08-22 20:38:34 +02:00
51898e6838 cleaning up and adding comments 2024-08-22 18:54:05 +02:00
d648135f4a add otp_requried decorator for oauth/authorize/ 2024-08-22 12:43:01 +02:00
ac496f040a basic client-side error handling 2024-08-20 19:29:53 +02:00
c3429e0212 cancel buttons 2024-08-20 17:59:45 +02:00
d51d93d839 rename views and templates for consistency 2024-08-20 17:48:32 +02:00
9d92e5f807 rename forms 2024-08-20 16:42:07 +02:00
1377fcfc47 imporve recovery code warning 2024-08-20 16:05:39 +02:00
8a7b99e678 improve the bootstrp key comment 2024-08-20 15:37:06 +02:00
f92acdfc37 use signed form fields instead of session storage 2024-08-20 13:23:44 +02:00
a91afd2597 wip webauthn authenticate 2024-08-20 12:34:12 +02:00
89851cc87e register a u2f device 2024-08-19 17:39:38 +02:00
2d22c25536 contain signature handling in the form 2024-08-17 21:16:57 +02:00
47b042c422 add sslserver for testing u2f with devserver 2024-08-16 16:45:39 +02:00
15f3d6fc5b more tests 2024-08-16 15:55:37 +02:00
aeca8ed656 fix EncryptedRecoverDevice + test 2024-08-16 15:37:07 +02:00
f8e1655be5 fix recovery codes counter 2024-08-16 13:01:39 +02:00
631e30d6b7 Merge branch 'main' into mfa 2024-08-16 12:40:19 +02:00
0326c78568 totp setup test 2024-08-16 12:02:56 +02:00
f5c1cdc15a improve presentation 2024-08-15 12:43:17 +02:00
d38eafb7cb send email notifications 2024-08-15 11:44:32 +02:00
ee03f062a4 improve copy 2024-08-15 10:31:14 +02:00
7356a989bf docs, comments etc 2024-08-13 20:54:23 +02:00
93f501f289 move forms to mfa app 2024-08-13 15:00:18 +02:00
734de7e49c use encrypted storage for mfa secrets 2024-08-13 14:11:17 +02:00
7d0aa08001 small markup tweak for recovery codes 2024-08-13 10:22:30 +02:00
144d26eba0 forms 2024-08-12 20:50:42 +02:00
d57b7a651f delete device button 2024-08-12 15:10:48 +02:00
13b856b7cc initial totp support
without key encryption at rest, reimplement with a custom Device class
2024-08-12 12:59:56 +02:00
ad0cfe9bee initial recovery codes support 2024-08-09 14:28:23 +02:00
8e419948f1 form to disable mfa 2024-08-08 21:03:30 +02:00
389d6f52c9 placeholder explanation 2024-08-08 19:33:24 +02:00
6d094a1a91 draft template 2024-08-08 19:15:30 +02:00
1277d939f8 mixin to ensure a recent mfa 2024-08-08 14:22:45 +02:00
935c19f502 use MfaRequiredIfConfiguredMixin in place of LoginRequiredMixin 2024-08-08 14:22:01 +02:00
0913f60deb wip 2024-08-06 19:29:06 +02:00