2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-09-04 08:47:37 +08:00
discourse/config
Jeff Wong f4f8a293e7 FEATURE: Implement 2factor login TOTP
implemented review items.

Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds.
I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail.
Translatable texts.
Move second factor logic to a helper class.
Move second factor specific controller endpoints to its own controller.
Move serialization logic for 2-factor details in admin user views.
Add a login ember component for de-duplication
Fix up code formatting
Change verbiage of google authenticator

add controller tests:
second factor controller tests
change email tests
change password tests
admin login tests

add qunit tests - password reset, preferences

fix: check for 2factor on change email controller
fix: email controller - only show second factor errors on attempt
fix: check against 'true' to enable second factor.

Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP

add two factor to email signin link

rate limit if second factor token present

add rate limiter test for second factor attempts
2018-02-21 09:04:07 +08:00
..
cloud/cloud66 Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
environments rename 'min_private_message_{post/title}_length' to 'min_personal_message_{post/title}_length' 2018-02-01 13:25:29 +05:30
initializers FIX: Server didn't use default_locale as fallback locale 2018-01-25 14:57:41 +01:00
locales FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00
application.rb PERF: run post timings in background 2018-01-19 08:27:29 +11:00
boot.rb minor changes to discourse bench 2018-02-20 14:41:21 +11:00
cdn.yml.sample
database.yml Support user defined postgres timeouts 2017-10-27 09:59:44 -04:00
deploy.rb.sample enough with the malloc limit, not needed 2016-05-25 21:09:07 +10:00
discourse.config.sample enough with the malloc limit, not needed 2016-05-25 21:09:07 +10:00
discourse.pill.sample Improve bluepill sample config. 2014-01-31 16:09:35 -05:00
discourse_defaults.conf FEATURE: Shorten setting name to max_reqs 2018-01-22 13:18:30 +11:00
environment.rb prevent the application from starting in development mode when SMTP settings are changed 2016-06-03 17:39:54 +02:00
logrotate.conf Replace Clockwork with Sidetiq 2013-08-14 21:39:40 +02:00
multisite.yml.production-sample warns sysadmin to rebake all the posts 2013-08-01 22:24:55 +02:00
nginx.global.conf Address @Supermathie's concerns in PR1430 2013-09-30 16:28:22 -04:00
nginx.sample.conf FIX: Support old Service Worker source file path to avoid routing errors. 2018-02-19 08:04:45 +08:00
projections.json Instead of .js.handlebars use .hbs for handlebars templates 2014-09-26 15:23:15 -04:00
puma.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
routes.rb FEATURE: Implement 2factor login TOTP 2018-02-21 09:04:07 +08:00
sidekiq.yml Opps no reason to limit this to 1. 2017-09-29 08:19:35 +08:00
site_settings.yml New setting: minimum trust level to embed images in a post 2018-02-20 20:00:06 -05:00
spring.rb BUGFIX: Correct after_fork semantics 2014-03-31 12:34:13 +11:00
thin.yml.sample
unicorn.conf.rb More control over Unicorn logstash logger. 2017-11-15 12:28:36 +08:00
unicorn_launcher reopen logs on usr1 2014-08-25 10:49:13 +10:00
unicorn_upstart.conf enough with the malloc limit, not needed 2016-05-25 21:09:07 +10:00