discourse/app/views
Jeff Wong f4f8a293e7 FEATURE: Implement 2factor login TOTP
implemented review items.

Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds.
I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail.
Translatable texts.
Move second factor logic to a helper class.
Move second factor specific controller endpoints to its own controller.
Move serialization logic for 2-factor details in admin user views.
Add a login ember component for de-duplication
Fix up code formatting
Change verbiage of google authenticator

add controller tests:
second factor controller tests
change email tests
change password tests
admin login tests

add qunit tests - password reset, preferences

fix: check for 2factor on change email controller
fix: email controller - only show second factor errors on attempt
fix: check against 'true' to enable second factor.

Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP

add two factor to email signin link

rate limit if second factor token present

add rate limiter test for second factor attempts
2018-02-21 09:04:07 +08:00
..
about don't force SiteSetting.title into meta title tag 2017-06-12 13:50:50 -04:00
admin/backups FEATURE: further restrict downloading of backups 2017-03-01 08:28:34 -07:00
application UX: Support for custom error pages and headers in plugins 2017-11-14 16:31:44 -05:00
badges FEATURE: add RSS feed for badge pages 2017-08-09 13:43:49 +05:30
categories safely call html_safe on category description 2017-07-25 11:40:02 -07:00
common Oops we should register a service worker as long as it is supported. 2018-02-15 15:02:14 +08:00
default FIX: Add a title to the groups pages 2016-07-25 14:24:43 -04:00
email Revert "SECURITY: Fix XSS on unsubscribed page." 2017-10-09 09:03:07 +08:00
embed Convert server side paths to use /u/ 2017-03-30 10:23:24 -04:00
exceptions Cleaning up the 404 page (#5363) 2017-11-24 12:41:31 -05:00
finish_installation FIX: prevent Cloudflare from obfuscating emails 2017-08-03 15:06:13 +05:30
invites FEATURE: new invite acceptance page, where username can be chosen and password can be set 2017-02-15 16:51:57 -05:00
layouts FIX: cache admin locale file for 24 hours 2018-01-09 10:23:49 +11:00
list remove uneeded code 2017-10-04 15:05:58 +11:00
metadata Allow for search engine updates 2016-09-19 22:25:54 -04:00
offline Add offline route and service worker to fix Android app install banner (#5217) 2017-10-31 10:46:48 +11:00
pending_flags_mailer FEATURE: Site Setting to determine whether flags defaults to topics 2017-10-20 12:37:20 -04:00
posts FIX: RSS feed must have unique GUID 2016-02-22 18:28:09 +05:30
robots_txt SECURITY: Prevent robots from indexing more routes 2018-02-04 13:24:36 -05:00
safe_mode UX: warn that something must be selected with safe mode 2017-11-13 15:59:51 +11:00
search UX: better title on search page 2017-10-27 09:13:04 +05:30
session FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00
static FIX: link to about page on subfolder 2017-10-30 14:34:12 -04:00
tags PERF: calculate topic_counts for tags in an async job so tag queries that include counts are much faster 2018-01-12 11:03:03 -05:00
topics FEATURE: omit images from og and twitter description tags 2017-11-28 21:34:02 +01:00
user_api_keys FEATURE: user API now contains scopes so permission is granular 2016-10-14 16:05:42 +11:00
user_notifications UX: increase max length of topic titles in summary email html by 40 characters 2017-11-06 10:00:01 -05:00
users FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00
users_email FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00
wizard FIX: cache admin locale file for 24 hours 2018-01-09 10:23:49 +11:00