From abeeba71672a711dab98194bb8ae751ee95e3385 Mon Sep 17 00:00:00 2001
From: Frederic Guillot <fred@kanboard.net>
Date: Tue, 31 Mar 2015 22:48:14 -0400
Subject: Add two factor authentication

---
 app/Template/twofactor/check.php | 10 ++++++++++
 app/Template/twofactor/index.php | 37 +++++++++++++++++++++++++++++++++++++
 2 files changed, 47 insertions(+)
 create mode 100644 app/Template/twofactor/check.php
 create mode 100644 app/Template/twofactor/index.php

(limited to 'app/Template/twofactor')

diff --git a/app/Template/twofactor/check.php b/app/Template/twofactor/check.php
new file mode 100644
index 00000000..af64bc76
--- /dev/null
+++ b/app/Template/twofactor/check.php
@@ -0,0 +1,10 @@
+<form method="post" action="<?= $this->u('twofactor', 'check', array('user_id' => $this->userSession->getId())) ?>" autocomplete="off">
+
+    <?= $this->formCsrf() ?>
+    <?= $this->formLabel(t('Code'), 'code') ?>
+    <?= $this->formText('code', array(), array(), array('placeholder="123456"'), 'form-numeric') ?>
+
+    <div class="form-actions">
+        <input type="submit" value="<?= t('Check my code') ?>" class="btn btn-blue"/>
+    </div>
+</form>
\ No newline at end of file
diff --git a/app/Template/twofactor/index.php b/app/Template/twofactor/index.php
new file mode 100644
index 00000000..bc9a12e9
--- /dev/null
+++ b/app/Template/twofactor/index.php
@@ -0,0 +1,37 @@
+<div class="page-header">
+    <h2><?= t('Two factor authentication') ?></h2>
+</div>
+
+<form method="post" action="<?= $this->u('twofactor', 'save', array('user_id' => $user['id'])) ?>" autocomplete="off">
+
+    <?= $this->formCsrf() ?>
+    <?= $this->formCheckbox('twofactor_activated', t('Enable/disable two factor authentication'), 1, isset($user['twofactor_activated']) && $user['twofactor_activated'] == 1) ?>
+
+    <div class="form-actions">
+        <input type="submit" value="<?= t('Save') ?>" class="btn btn-blue"/>
+    </div>
+</form>
+
+<?php if ($user['twofactor_activated'] == 1): ?>
+<div class="listing">
+    <p><?= t('Secret key: ') ?><strong><?= $this->e($user['twofactor_secret']) ?></strong> (base32)</p>
+    <p><br/><img src="<?= $qrcode_url ?>"/><br/><br/></p>
+    <p>
+        <?= t('This QR Ccde contains the key URI: ') ?><strong><?= $this->e($key_url) ?></strong>
+        <br/><br/>
+        <?= t('Save the secret key in your TOTP software (by example Google Authenticator or FreeOTP).') ?>
+    </p>
+</div>
+
+<h3><?= t('Test your device') ?></h3>
+<form method="post" action="<?= $this->u('twofactor', 'test', array('user_id' => $user['id'])) ?>" autocomplete="off">
+
+    <?= $this->formCsrf() ?>
+    <?= $this->formLabel(t('Code'), 'code') ?>
+    <?= $this->formText('code', array(), array(), array('placeholder="123456"'), 'form-numeric') ?>
+
+    <div class="form-actions">
+        <input type="submit" value="<?= t('Check my code') ?>" class="btn btn-blue"/>
+    </div>
+</form>
+<?php endif ?>
-- 
cgit v1.2.3