OTP/2FA config template & luciano blocktronics theme

This commit is contained in:
Bryan Ashby 2019-06-15 22:18:51 -06:00
parent 42ac6f8689
commit abc6a36275
No known key found for this signature in database
GPG Key ID: B49EB437951D2542
5 changed files with 139 additions and 1 deletions

Binary file not shown.

Binary file not shown.

View File

@ -385,6 +385,47 @@
}
}
userTwoFactorAuthOTPConfig: {
config: {
menuInfoFormat10: "{infoText}"
infoText: {
disabled: Enabling 2-factor authentication can greatly increase account security.
}
}
mci: {
TM1: {
width: 20
items: [
"enabled"
"disabled"
]
focusTextStyle: upper
styleSGR1: |08
}
SM2: {
width: 20
focusTextStyle: upper
styleSGR1: |08
items: [
// order is important:
"Time-Based - TOTP"
"HMAC-Based - HOTP"
"Google Auth"
]
}
TM3: {
focusTextStyle: upper
styleSGR1: |00|08
}
MT10: {
width: 31
height: 3
mode: preview
acceptsFocus: false
}
}
}
nodeMessage: {
config: {
messageFormat: "|00|08 :: |03message from |11{fromUserName} |08/ |03node |11{fromNodeId}|08 @ |11{timestamp} |08::\r\n|07 {message}"

View File

@ -34,13 +34,14 @@ const MciViewIds = {
enableToggle : 1,
otpType : 2,
submit : 3,
infoText : 4,
customRangeStart : 10, // 10+ = customs
};
const DefaultMsg = {
infoText: {
disabled : 'Enabling 2-Factor Authentication via One-Time-Password (2FA/OTP) can greatly increase the security of your account.',
disabled : 'Enabling 2-factor authentication can greatly increase account security.',
enabled : 'A valid email address set in user config is required to enable 2-Factor Authentication.',
rfc6238_TOTP : 'Time-Based One-Time-Password (TOTP, RFC-6238).',
rfc4266_HOTP : 'HMAC-Based One-Time-Password (HOTP, RFC-4266).',

View File

@ -1137,6 +1137,23 @@
value: { command: "MRC" }
action: @menu:mrc
}
{
value: { command: "2FA" }
action: [
{
//
// For security reasons, only allow 2FA/OTP to be
// configured over already secure (SSL, wss://, ...)
// connections. Not doing so risks leaking secrets!
//
acs: SC
action: @menu:userTwoFactorAuthOTPConfig
}
{
action: @menu:userTwoFactorAuthOTPSecConnRequired
}
]
}
{
value: 1
action: @menu:mainMenu
@ -1210,6 +1227,85 @@
}
}
userTwoFactorAuthOTPConfig: {
desc: 2FA/OTP Config
module: user_2fa_otp_config
art: 2FACONFSCR
form: {
0: {
mci: {
TM1: {
argName: enableToggle
focus: true
items: [
// order is important here:
"disable"
"enable/reset"
]
}
SM2: {
argName: otpType
items: [
// order is important here:
"Time-Based - TOTP"
"HMAC-Based - HOTP"
"Google Authenticator"
]
}
TM3: {
argName: submit
items: [
"save"
"cancel"
]
submit: true
}
}
submit: {
*: [
{
value: { submit: 0 }
action: @method:saveChanges
}
{
value: { submit: 1 }
action: @systemMethod:prevMenu
}
]
}
actionKeys: [
{
keys: [ "escape" ]
action: @systemMethod:prevMenu
}
{
keys: [ "q", "shift + q" ]
action: @method:showQRCode
}
{
keys: [ "s", "shift + s" ]
action: @method:showSecret
}
{
keys: [ "b", "shift + b" ]
action: @method:showBackupCodes
}
{
keys: [ "n", "shift + n" ]
action: @method:generateNewBackupCodes
}
]
}
}
}
userTwoFactorAuthOTPSecConnRequired: {
desc: Insecure Warning
art: 2FAOTPSECREQ
}
nodeMessage: {
desc: Node Messaging
module: node_msg