3 Commits

Author	SHA1	Message	Date
Dan Brown	9b271e559f	Worked on MFA setup required flow ... - Restructured some of the route naming to be a little more consistent. - Moved the routes about to be more logically in one place. - Created a new middleware to handle the auth of people that should be allowed access to mfa setup routes, since these could be used by existing logged in users or by people needing to setup MFA on access. - Added testing to cover MFA setup required flow. - Added TTL and method tracking to session last-login tracking system.	2021-08-02 22:02:25 +01:00
Dan Brown	1278fb4969	Started moving MFA and email confirmation to new login flow ... Instead of being soley middleware based.	2021-07-17 18:24:50 +01:00
Dan Brown	78f9c01519	Started on some MFA access-time checks ... Discovered some difficult edge cases: - User image loading in header bar when using local_secure storage - 404s showing user-specific visible content due to content listing on 404 page since user is in semi-logged in state. Maybe need to go through and change up how logins are handled to centralise and provide us better control at login time to prevent any auth level.	2021-07-16 23:23:36 +01:00