From abc6a362751e6b8032e49c173f5d0cbb4d9bdd88 Mon Sep 17 00:00:00 2001
From: Bryan Ashby <bryan@l33t.codes>
Date: Sat, 15 Jun 2019 22:18:51 -0600
Subject: [PATCH] OTP/2FA config template & luciano blocktronics theme

---
 .../luciano_blocktronics/2FACONFSCR.ans       | Bin 0 -> 2672 bytes
 .../luciano_blocktronics/2FAOTPSECREQ.ans     | Bin 0 -> 272 bytes
 art/themes/luciano_blocktronics/theme.hjson   |  41 ++++++++
 core/user_2fa_otp_config.js                   |   3 +-
 misc/menu_template.in.hjson                   |  96 ++++++++++++++++++
 5 files changed, 139 insertions(+), 1 deletion(-)
 create mode 100644 art/themes/luciano_blocktronics/2FACONFSCR.ans
 create mode 100644 art/themes/luciano_blocktronics/2FAOTPSECREQ.ans

diff --git a/art/themes/luciano_blocktronics/2FACONFSCR.ans b/art/themes/luciano_blocktronics/2FACONFSCR.ans
new file mode 100644
index 0000000000000000000000000000000000000000..3c2560007a954e0fedf9f1c121b4844f005e5026
GIT binary patch
literal 2672
zcmb_e%TC)s6opl#Y`dw-W;QIV+K!0}S%oxhS%e^B%7Rr$O;wc%uRwnb@jJ2VKdE}o
zojYTjpss49#B=99&OP@Lw$7q{8uh!8HCtz~Em!qZl~uWQ7Fo#SAwH-CS*?J#ib}@t
z(|sE?+3^-~BQ|BntX9rpmip_}ic*8%-NgRkSI?eIN5>{Vo!}7JcOv>U80M2>GdRh=
zj1KdI;UGVl98x>7??u5(4o40B{9xQX9u20`)5-Bi4dXy4#KexKKm!hX!U5CVtIvQn
zpDpIar7{4tbsoJ4mccHu`C#9HYCEu34}~{3>cHU9D9Oc4Z;^}OxLRJDyX9<oe+L~Q
zevis_J0Hg)=;^Cer|Zew9_MjHy{)q(^FrcfZ9+IYzqp(|T-^eD2Hj9A4Kf`kK8U>1
zUmBF0KNqE4$4Z4wRTUA8y^#X>tRH?9zsw!DUChoe3v+X8=2zc9lR%24LG1au#rbUh
z^Zr_N@4Rv#0N9!VsUVFlq)I?xwwT`*OEpfUx9y^(`n^~bx3gto7QpyI#E@Zyrd~^1
zggOUVt%|l$VX`wUF$r-$&1?x-8d<$b!(h;fAD6^Q(~P}|aG;1|1sAYHc?G*yj(fiH
zB_F9f<A4~%>!Y6`l;B_`qdS#~Umii33?xwT=@^1-?*VaKt+)*kfwwsPuJ|hLiak=5
zE1aR|Y`bBH(4lfxFBZDuA`zGP#vjsGAN*eT@*ESiXfKE=IB@r24j>^OTmzSo*Pas)
zURz+MB}JEyP$pF3oF<l3r_fNYV8-QvBP!Yp3~N<+#rb3L!3})XqgZ0|kt2WO07%RD
zj!3v-boX|s{X#V0$N&nDAYyq%ASWpbk9vo2|MUShmzp=JygEFvWtjtBC1>6RnF0`N
za;wxQlD>48Tl7I84#nY838^*XNLJF?<WX)&p-WIQ5<5VaMwTo^k6qkSlf2--Q{~xe
zkwpy7m!yYIY3AqR{j&fJ;O7T<`ab{AE~2`?&!;?YY?RsH!9jU?@=@!O2BzTNx16T0
zE#Oa0Tf94#h%eOdd2E+=Giz4@pEU=Qw_F{7>U^Oz_-X2TG?|`+38zCF{=8y=xmpJV
zD3YvvuC4YIk$gucUwZcOQ9&T?v$XvM@(#`#Dy~<>30%1;gesd<_p`LLGOVRv3!-CB
zLm6su<p$o%IL{IQ!-K?RX@-5=`gP(~0F_uu3YkDu_)JumROCXF+`J+yQJX7$UTN1i
zocsR^3lvY)c{?4P3`bE!fB)%8qIfsz#XGM$8ylOOM;mW8<avFtKQ>=K58Nqy{snmY
BfCB&k

literal 0
HcmV?d00001

diff --git a/art/themes/luciano_blocktronics/2FAOTPSECREQ.ans b/art/themes/luciano_blocktronics/2FAOTPSECREQ.ans
new file mode 100644
index 0000000000000000000000000000000000000000..ce0079ac319ed0339eb9babd9d3892dcc1dd4bc3
GIT binary patch
literal 272
zcmb1+Hn27^ur@Z&<pKifXk)Wn1t4%#C{9f-ElO2L&d<wBO)kmI&r`@ORwzm>EX^!R
zO;ISxS4d1wPAx80FmiL$_YVmGsxK+Y%u6p;1e;<GGzDr{NKqx+l)Q9>vdlz<;9w7h
z{34hY;i*Z%`N`R-CB=GNQo)X)&aMUqAU9A67#SE^8kiZHPGewTU}OwnU<cAbAnfVn
Ms}Sby2;sp=0K=R-8UO$Q

literal 0
HcmV?d00001

diff --git a/art/themes/luciano_blocktronics/theme.hjson b/art/themes/luciano_blocktronics/theme.hjson
index 0e21329c..ab49f1fa 100644
--- a/art/themes/luciano_blocktronics/theme.hjson
+++ b/art/themes/luciano_blocktronics/theme.hjson
@@ -385,6 +385,47 @@
 				}
 			}
 
+			userTwoFactorAuthOTPConfig: {
+				config: {
+					menuInfoFormat10: "{infoText}"
+					infoText: {
+						disabled: Enabling 2-factor authentication can greatly increase account security.
+					}
+				}
+				mci: {
+					TM1: {
+						width: 20
+						items: [
+							"enabled"
+							"disabled"
+						]
+						focusTextStyle: upper
+						styleSGR1: |08
+					}
+					SM2: {
+						width: 20
+						focusTextStyle: upper
+						styleSGR1: |08
+						items: [
+						//	order is important:
+							"Time-Based - TOTP"
+							"HMAC-Based - HOTP"
+							"Google Auth"
+						]
+					}
+					TM3: {
+						focusTextStyle: upper
+						styleSGR1: |00|08
+					}
+					MT10: {
+						width: 31
+						height: 3
+						mode: preview
+						acceptsFocus: false
+					}
+				}
+			}
+
 			nodeMessage: {
 				config: {
 					messageFormat: "|00|08 :: |03message from |11{fromUserName} |08/ |03node |11{fromNodeId}|08 @ |11{timestamp} |08::\r\n|07    {message}"
diff --git a/core/user_2fa_otp_config.js b/core/user_2fa_otp_config.js
index 61ef0a0c..8ad50425 100644
--- a/core/user_2fa_otp_config.js
+++ b/core/user_2fa_otp_config.js
@@ -34,13 +34,14 @@ const MciViewIds = {
     enableToggle        : 1,
     otpType             : 2,
     submit              : 3,
+    infoText            : 4,
 
     customRangeStart    : 10,   //  10+ = customs
 };
 
 const DefaultMsg = {
     infoText: {
-        disabled        : 'Enabling 2-Factor Authentication via One-Time-Password (2FA/OTP) can greatly increase the security of your account.',
+        disabled        : 'Enabling 2-factor authentication can greatly increase account security.',
         enabled         : 'A valid email address set in user config is required to enable 2-Factor Authentication.',
         rfc6238_TOTP    : 'Time-Based One-Time-Password (TOTP, RFC-6238).',
         rfc4266_HOTP    : 'HMAC-Based One-Time-Password (HOTP, RFC-4266).',
diff --git a/misc/menu_template.in.hjson b/misc/menu_template.in.hjson
index 9409a9c9..9de82c76 100644
--- a/misc/menu_template.in.hjson
+++ b/misc/menu_template.in.hjson
@@ -1137,6 +1137,23 @@
                     value: { command: "MRC" }
                     action: @menu:mrc
                 }
+                {
+                    value: { command: "2FA" }
+                    action: [
+                        {
+                            //
+                            //  For security reasons, only allow 2FA/OTP to be
+                            //  configured over already secure (SSL, wss://, ...)
+                            //  connections. Not doing so risks leaking secrets!
+                            //
+                            acs: SC
+                            action: @menu:userTwoFactorAuthOTPConfig
+                        }
+                        {
+                            action: @menu:userTwoFactorAuthOTPSecConnRequired
+                        }
+                    ]
+                }
                 {
                     value: 1
                     action: @menu:mainMenu
@@ -1210,6 +1227,85 @@
             }
         }
 
+        userTwoFactorAuthOTPConfig: {
+            desc: 2FA/OTP Config
+            module: user_2fa_otp_config
+            art: 2FACONFSCR
+            form: {
+                0: {
+                    mci: {
+                        TM1: {
+                            argName: enableToggle
+                            focus: true
+                            items: [
+                                //  order is important here:
+                                "disable"
+                                "enable/reset"
+                            ]
+                        }
+                        SM2: {
+                            argName: otpType
+                            items: [
+                                //  order is important here:
+                                "Time-Based - TOTP"
+                                "HMAC-Based - HOTP"
+                                "Google Authenticator"
+                            ]
+                        }
+                        TM3: {
+                            argName: submit
+                            items: [
+                                "save"
+                                "cancel"
+                            ]
+                            submit: true
+                        }
+                    }
+
+                    submit: {
+                        *: [
+                            {
+                                value: { submit: 0 }
+                                action: @method:saveChanges
+                            }
+                            {
+                                value: { submit: 1 }
+                                action: @systemMethod:prevMenu
+                            }
+                        ]
+                    }
+
+                    actionKeys: [
+                        {
+                            keys: [ "escape" ]
+                            action: @systemMethod:prevMenu
+                        }
+                        {
+                            keys: [ "q", "shift + q" ]
+                            action: @method:showQRCode
+                        }
+                        {
+                            keys: [ "s", "shift + s" ]
+                            action: @method:showSecret
+                        }
+                        {
+                            keys: [ "b", "shift + b" ]
+                            action: @method:showBackupCodes
+                        }
+                        {
+                            keys: [ "n", "shift + n" ]
+                            action: @method:generateNewBackupCodes
+                        }
+                    ]
+                }
+            }
+        }
+
+        userTwoFactorAuthOTPSecConnRequired: {
+            desc: Insecure Warning
+            art: 2FAOTPSECREQ
+        }
+
         nodeMessage: {
             desc: Node Messaging
             module: node_msg