6 Commits

Author	SHA1	Message	Date
Dan Brown	78f9c01519	Started on some MFA access-time checks ... Discovered some difficult edge cases: - User image loading in header bar when using local_secure storage - 404s showing user-specific visible content due to content listing on 404 page since user is in semi-logged in state. Maybe need to go through and change up how logins are handled to centralise and provide us better control at login time to prevent any auth level.	2021-07-16 23:23:36 +01:00
Dan Brown	f696aa5eea	Added the ability to remove an MFA method ... Includes testing to cover	2021-07-14 21:27:21 +01:00
Dan Brown	529971c534	Added backup code setup flow ... - Includes testing to cover flow. - Moved TOTP logic to its own controller. - Added some extra totp tests.	2021-07-02 20:53:33 +01:00
Dan Brown	916a82616f	Complete base flow for TOTP setup ... - Includes DB storage and code validation. - Extracted TOTP work to its own service file. - Still needs testing to cover this side of things.	2021-06-30 22:10:02 +01:00
Dan Brown	d25cd83d8e	Added TOTP generation view and started verification stage ... Also updated MFA setup view to have settings-like listed interface to make it possible to extend with extra options in the future.	2021-06-29 22:06:49 +01:00
Dan Brown	efb6a6b457	Started barebones work of MFA system	2021-06-28 22:02:45 +01:00