From e242684d1af50eda2239f8281d4f5db9eec2be34 Mon Sep 17 00:00:00 2001
From: Mark Felder <feld@FreeBSD.org>
Date: Wed, 15 Jul 2020 17:58:07 -0500
Subject: [PATCH] Improve totp input field: disable autocorrect etc, add hints
 so browsers and password managers can find it

---
 src/components/mfa_form/totp_form.vue                  | 10 ++++++++--
 .../settings_modal/tabs/security_tab/mfa.vue           | 10 +++++++++-
 2 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/src/components/mfa_form/totp_form.vue b/src/components/mfa_form/totp_form.vue
index a344b395..bc38b376 100644
--- a/src/components/mfa_form/totp_form.vue
+++ b/src/components/mfa_form/totp_form.vue
@@ -16,9 +16,15 @@
             {{ $t('login.authentication_code') }}
           </label>
           <input
-            id="code"
-            v-model="code"
+            autocomplete="one-time-code"
+            autocorrect="off"
+            autocapitalize="off"
             class="form-control"
+            id="totp"
+            name="totp"
+            spellcheck="false"
+            type="text"
+            v-model="code"
           >
         </div>
 
diff --git a/src/components/settings_modal/tabs/security_tab/mfa.vue b/src/components/settings_modal/tabs/security_tab/mfa.vue
index 7aca3c8d..351f9c97 100644
--- a/src/components/settings_modal/tabs/security_tab/mfa.vue
+++ b/src/components/settings_modal/tabs/security_tab/mfa.vue
@@ -97,8 +97,16 @@
                 <h4>{{ $t('general.verify') }}</h4>
                 <p>{{ $t('settings.mfa.verify.desc') }}</p>
                 <input
-                  v-model="otpConfirmToken"
+                  autocomplete="one-time-code"
+                  autocorrect="off"
+                  autocapitalize="off"
+                  id="totp"
+                  maxlength="6"
+                  name="totp"
+                  pattern="[0-9]*"
+                  spellcheck="false"
                   type="text"
+                  v-model="otpConfirmToken"
                 >
 
                 <p>{{ $t('settings.enter_current_password_to_confirm') }}:</p>