]> cat aescling's git repositories - mastodon.git/commit
Add recovery code support for two-factor auth (#1773)
authorPatrick Figel <patrick@figel.email>
Sat, 15 Apr 2017 11:26:03 +0000 (13:26 +0200)
committerEugen <eugen@zeonfederated.com>
Sat, 15 Apr 2017 11:26:03 +0000 (13:26 +0200)
commitdf4ff9a8e13d776e1670c232655db0275a353a0f
treea7bdb4c0240e169bac01bf67b76f685e9a9b4a67
parent67ad84b7ebf080d6a6cbcb7d299e02c2a51d955e
Add recovery code support for two-factor auth (#1773)

* Add recovery code support for two-factor auth

When users enable two-factor auth, the app now generates ten
single-use recovery codes. Users are encouraged to print the codes
and store them in a safe place.

The two-factor prompt during login now accepts both OTP codes and
recovery codes.

The two-factor settings UI allows users to regenerated lost
recovery codes. Users who have set up two-factor auth prior to
this feature being added can use it to generate recovery codes
for the first time.

Fixes #563 and fixes #987

* Set OTP_SECRET in test enviroment

* add missing .html to view file names
18 files changed:
.env.test
app/assets/stylesheets/lists.scss
app/controllers/auth/sessions_controller.rb
app/controllers/settings/two_factor_auths_controller.rb
app/models/user.rb
app/views/auth/sessions/two_factor.html.haml
app/views/settings/two_factor_auths/_recovery_codes.html.haml [new file with mode: 0644]
app/views/settings/two_factor_auths/create.html.haml [new file with mode: 0644]
app/views/settings/two_factor_auths/recovery_codes.html.haml [new file with mode: 0644]
app/views/settings/two_factor_auths/show.html.haml
config/initializers/devise.rb
config/locales/en.yml
config/locales/simple_form.en.yml
config/routes.rb
db/migrate/20170414080609_add_devise_two_factor_backupable_to_users.rb [new file with mode: 0644]
db/schema.rb
spec/controllers/auth/sessions_controller_spec.rb
spec/models/user_spec.rb