Minor Fixes

CHANGELOG.md

@@ -1,21 +1,5 @@
 # Change Log
-## 2.8.0
+## 2.6.0 (dev)
-* Support For Django 4.0+ JSONField
-* Removed jsonfield package from requirements
-
-## 2.7.0 
-* Fixed #70
-* Add QR Code for trusted device link
-* Better formatting for trusted device start page.
-## 2.6.1
-* Fix: CVE-2022-42731: related to the possibility of registration replay attack.
-  Thanks to 'SSE (Secure Systems Engineering)'
-
-## 2.5.1
-* Fix: CVE-2022-42731: related to the possibility of registration replay attack.
-  Thanks to 'SSE (Secure Systems Engineering)' 
-
-## 2.6.0
    * Adding Backup Recovery Codes (Recovery) as a method.
      Thanks to @Spitfireap for work, and  @peterthomassen for guidance.
    * Added: `RECOVERY_ITERATION` to set the number of iteration when hashing recovery token

README.md

@@ -1,7 +1,6 @@
 # django-mfa2
 A Django app that handles MFA, it supports TOTP, U2F, FIDO2 U2F (Web Authn), Email Tokens , Trusted  Devices and backup codes.
 
-[![Works with PassKeys](https://github.com/mkalioby/django-mfa2/raw/master/img/Works%20with%20PassKeys-black.png)](https://fidoalliance.org/passkeys/)
 ### Pip Stats
 [![PyPI version](https://badge.fury.io/py/django-mfa2.svg)](https://badge.fury.io/py/django-mfa2)
 [![Downloads Count](https://static.pepy.tech/personalized-badge/django-mfa2?period=total&units=international_system&left_color=black&right_color=green&left_text=Downloads)](https://pepy.tech/project/django-mfa2)
@@ -17,14 +16,12 @@ Web Authencation API (WebAuthn) is state-of-the art techology that is expected t
 
 For FIDO2, the following are supported
  * **security keys** (Firefox 60+, Chrome 67+, Edge 18+, Safari 13 on Mac OS, Chrome on Andriod, Safari on iOS 13.3+),
- * **Windows Hello** (Firefox 67+, Chrome 72+ , Edge),
+ * **Windows Hello** (Firefox 67+, Chrome 72+ , Edge) ,
  * **Apple's Touch ID/Face ID** (Chrome 70+ on Mac OS X, Safari on macOS Big Sur, Safari on iOS 14.0+ ),
  * **android-safetynet** (Chrome 70+, Firefox 68+)
  * **NFC devices using PCSC** (Not Tested, but as supported in fido2)
  * **Soft Tokens** 
-    * ~~[krypt.co](https://krypt.co/): Login by a notification on your phone.~~
+    * [krypt.co](https://krypt.co/): Login by a notification on your phone.
-
-**Update**: Dec 2022, krypt.co has been killed by Google for Passkeys.
 
 In English :), It allows you to verify the user by security keys on PC, Laptops or Mobiles, Windows Hello (Fingerprint, PIN) on Windows 10 Build 1903+ (May 2019 Update) Touch/Face ID on Macbooks (Chrome, Safari), Touch/Face ID on iPhone and iPad and Fingerprint/Face/Iris/PIN on Android Phones.
 
@@ -34,8 +31,6 @@ Trusted device is a mode for the user to add a device that doesn't support secur
 
 Package tested with Django 1.8, Django 2.2 on Python 2.7 and Python 3.5+ but it was not checked with any version in between but open for issues.
 
-If you just need WebAuthn and Passkeys, you can use **[django-passkeys](https://github.com/mkalioby/django-passkeys)**, which is a slim-down of this app and much easier to integrate.
-
 Depends on
 
 * pyotp
@@ -47,12 +42,8 @@ Depends on
 
 # Installation
 1. using pip 
-    * For Django >= 4.0
 
-        `pip install django-mfa2`
+    `pip install django-mfa2`
-    * For Django < 4.0
-           
-      `pip install django-mfa2 jsonfield`
 2. Using Conda forge 
    
    `conda config --add channels conda-forge`
@@ -205,8 +196,6 @@ function some_func() {
 * [AndreasDickow](https://github.com/AndreasDickow)
 * [mnelson4](https://github.com/mnelson4)
 * [ezrajrice](https://github.com/ezrajrice)
-* [Spitfireap](https://github.com/Spitfireap)
-* [peterthomassen](https://github.com/peterthomassen)
 
 
  # Security contact information

example/example/urls.py

@@ -16,13 +16,12 @@ Including another URLconf
 from django.contrib import admin
 from django.urls import path,re_path,include
 from . import views,auth
-from mfa import TrustedDevice
 urlpatterns = [
     path('admin/', admin.site.urls),
     path('mfa/', include('mfa.urls')),
     path('auth/login',auth.loginView,name="login"),
     path('auth/logout',auth.logoutView,name="logout"),
-    path('devices/add/', TrustedDevice.add,name="add_trusted_device"),
+
     re_path('^$',views.home,name='home'),
     path('registered/',views.registered,name='registered')
 ]

mfa/FIDO2.py

@@ -16,7 +16,7 @@ from .views import login, reset_cookie
 import datetime
 from .Common import get_redirect_url
 from django.utils import timezone
-from django.http import JsonResponse
+
 
 def recheck(request):
     """Starts FIDO2 recheck"""
@@ -49,15 +49,13 @@ def begin_registeration(request):
 def complete_reg(request):
     """Completes the registeration, called by API"""
     try:
-        if not "fido_state" in request.session:
-            return JsonResponse({'status': 'ERR', "message": "FIDO Status can't be found, please try again"})
         data = cbor.decode(request.body)
 
         client_data = CollectedClientData(data['clientDataJSON'])
         att_obj = AttestationObject((data['attestationObject']))
         server = getServer()
         auth_data = server.register_complete(
-            request.session.pop('fido_state'),
+            request.session['fido_state'],
             client_data,
             att_obj
         )
@@ -81,7 +79,7 @@ def complete_reg(request):
             client.captureException()
         except:
             pass
-        return JsonResponse({'status': 'ERR', "message": "Error on server, please try again later"})
+        return HttpResponse(simplejson.dumps({'status': 'ERR', "message": "Error on server, please try again later"}))
 
 
 def start(request):

mfa/TrustedDevice.py

@@ -7,11 +7,10 @@ from django.template.context_processors import csrf
 from .models import *
 import user_agents
 from django.utils import timezone
-from django.urls import reverse
 
 def id_generator(size=6, chars=string.ascii_uppercase + string.digits):
     x=''.join(random.choice(chars) for _ in range(size))
-    if not User_Keys.objects.filter(properties__icontains='"key": "%s"'%x).exists(): return x
+    if not User_Keys.objects.filter(properties__shas="$.key="+x).exists(): return x
     else: return id_generator(size,chars)
 
 def getUserAgent(request):
@@ -58,13 +57,12 @@ def getCookie(request):
 def add(request):
     context=csrf(request)
     if request.method=="GET":
-        context.update({"username":request.GET.get('u',''),"key":request.GET.get('k','')})
         return render(request,"TrustedDevices/Add.html",context)
     else:
         key=request.POST["key"].replace("-","").replace(" ","").upper()
         context["username"] = request.POST["username"]
         context["key"] = request.POST["key"]
-        trusted_keys=User_Keys.objects.filter(username=request.POST["username"],properties__icontains='"key": "%s"'%key)
+        trusted_keys=User_Keys.objects.filter(username=request.POST["username"],properties__has="$.key="+key)
         cookie=False
         if trusted_keys.exists():
             tk=trusted_keys[0]
@@ -99,7 +97,7 @@ def start(request):
         request.session["td_id"]=td.id
     try:
         if td==None: td=User_Keys.objects.get(id=request.session["td_id"])
-        context={"key":td.properties["key"],"url":request.scheme+"://"+request.get_host() + reverse('add_trusted_device')}
+        context={"key":td.properties["key"]}
     except:
         del request.session["td_id"]
         return start(request)
@@ -126,14 +124,12 @@ def verify(request):
         json= jwt.decode(request.COOKIES.get('deviceid'),settings.SECRET_KEY)
         if json["username"].lower()== request.session['base_username'].lower():
             try:
-                uk = User_Keys.objects.get(username=request.POST["username"].lower(), properties__icontains='"key": "%s"'%json["key"])
+                uk = User_Keys.objects.get(username=request.POST["username"].lower(), properties__has="$.key=" + json["key"])
                 if uk.enabled and uk.properties["status"] == "trusted":
                     uk.last_used=timezone.now()
                     uk.save()
                     request.session["mfa"] = {"verified": True, "method": "Trusted Device","id":uk.id}
                     return True
             except:
-                import traceback
-                print(traceback.format_exc())
                 return False
     return False

mfa/helpers.py

@@ -4,14 +4,8 @@ from . import TrustedDevice, U2F, FIDO2, totp
 import simplejson
 from django.shortcuts import HttpResponse
 from mfa.views import verify,goto
-from mfa.recovery import delTokens
 def has_mfa(request,username):
-    uk = User_Keys.objects.filter(username=username,enabled=1)
+    if User_Keys.objects.filter(username=username,enabled=1).count()>0:
-    if uk.count()==1: 
-        for u in uk:
-            if u.key_type == "RECOVERY":
-                delTokens(request)
-    elif uk.count()>0:
         return verify(request, username)
     return False
 

mfa/migrations/0005_auto_20181115_2014.py

@@ -2,14 +2,7 @@
 from __future__ import unicode_literals
 
 from django.db import models, migrations
-try:
+import jsonfield.fields
-    from django.db.models import JSONField
-except ImportError:
-    try:
-        from jsonfield.fields import JSONField
-    except ImportError:
-        raise ImportError("Can't find a JSONField implementation, please install jsonfield if django < 4.0")
-
 
 
 def modify_json(apps, schema_editor):
@@ -31,7 +24,7 @@ class Migration(migrations.Migration):
         migrations.AddField(
             model_name='user_keys',
             name='properties',
-            field=JSONField(null=True),
+            field=jsonfield.fields.JSONField(null=True),
         ),
         migrations.RunPython(modify_json)
     ]

mfa/models.py

@@ -1,12 +1,5 @@
 from django.db import models
-try:
+from jsonfield import JSONField
-    from django.db.models import JSONField
-except ModuleNotFoundError:
-    try:
-        from jsonfield import JSONField
-    except ModuleNotFoundError:
-        raise ModuleNotFoundError("Can't find a JSONField implementation, please install jsonfield if django < 4.0")
-
 from jose import jwt
 from django.conf import settings
 #from jsonLookup import shasLookup, hasLookup

mfa/static/mfa/js/bootstrap-toggle.min.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bootstrap-toggle.min.js","sources":["bootstrap-toggle.js"],"names":["$","Plugin","option","this","each","$this","data","options","Toggle","element","$element","extend","defaults","render","VERSION","DEFAULTS","on","off","onstyle","offstyle","size","style","width","height","prototype","attr","_onstyle","_offstyle","$toggleOn","html","addClass","$toggleOff","$toggleHandle","$toggleGroup","append","$toggle","prop","wrap","parent","Math","max","outerWidth","outerHeight","css","update","trigger","toggle","silent","removeClass","enable","removeAttr","disable","change","proxy","destroy","remove","removeData","unwrap","old","fn","bootstrapToggle","Constructor","noConflict","document","e","$checkbox","find","preventDefault","jQuery"],"mappings":";;;;;;;CASE,SAAUA,GACV,YAoID,SAASC,GAAOC,GACf,MAAOC,MAAKC,KAAK,WAChB,GAAIC,GAAUL,EAAEG,MACZG,EAAUD,EAAMC,KAAK,aACrBC,EAA2B,gBAAVL,IAAsBA,CAEtCI,IAAMD,EAAMC,KAAK,YAAcA,EAAO,GAAIE,GAAOL,KAAMI,IACvC,gBAAVL,IAAsBI,EAAKJ,IAASI,EAAKJ,OAtItD,GAAIM,GAAS,SAAUC,EAASF,GAC/BJ,KAAKO,SAAYV,EAAES,GACnBN,KAAKI,QAAYP,EAAEW,UAAWR,KAAKS,WAAYL,GAC/CJ,KAAKU,SAGNL,GAAOM,QAAW,QAElBN,EAAOO,UACNC,GAAI,KACJC,IAAK,MACLC,QAAS,UACTC,SAAU,UACVC,KAAM,SACNC,MAAO,GACPC,MAAO,KACPC,OAAQ,MAGTf,EAAOgB,UAAUZ,SAAW,WAC3B,OACCI,GAAIb,KAAKO,SAASe,KAAK,YAAcjB,EAAOO,SAASC,GACrDC,IAAKd,KAAKO,SAASe,KAAK,aAAejB,EAAOO,SAASE,IACvDC,QAASf,KAAKO,SAASe,KAAK,iBAAmBjB,EAAOO,SAASG,QAC/DC,SAAUhB,KAAKO,SAASe,KAAK,kBAAoBjB,EAAOO,SAASI,SACjEC,KAAMjB,KAAKO,SAASe,KAAK,cAAgBjB,EAAOO,SAASK,KACzDC,MAAOlB,KAAKO,SAASe,KAAK,eAAiBjB,EAAOO,SAASM,MAC3DC,MAAOnB,KAAKO,SAASe,KAAK,eAAiBjB,EAAOO,SAASO,MAC3DC,OAAQpB,KAAKO,SAASe,KAAK,gBAAkBjB,EAAOO,SAASQ,SAI/Df,EAAOgB,UAAUX,OAAS,WACzBV,KAAKuB,SAAW,OAASvB,KAAKI,QAAQW,QACtCf,KAAKwB,UAAY,OAASxB,KAAKI,QAAQY,QACvC,IAAIC,GAA6B,UAAtBjB,KAAKI,QAAQa,KAAmB,SAClB,UAAtBjB,KAAKI,QAAQa,KAAmB,SACV,SAAtBjB,KAAKI,QAAQa,KAAkB,SAC/B,GACCQ,EAAY5B,EAAE,uBAAuB6B,KAAK1B,KAAKI,QAAQS,IACzDc,SAAS3B,KAAKuB,SAAW,IAAMN,GAC7BW,EAAa/B,EAAE,uBAAuB6B,KAAK1B,KAAKI,QAAQU,KAC1Da,SAAS3B,KAAKwB,UAAY,IAAMP,EAAO,WACrCY,EAAgBhC,EAAE,gDACpB8B,SAASV,GACPa,EAAejC,EAAE,8BACnBkC,OAAON,EAAWG,EAAYC,GAC5BG,EAAUnC,EAAE,iDACd8B,SAAU3B,KAAKO,SAAS0B,KAAK,WAAajC,KAAKuB,SAAWvB,KAAKwB,UAAU,QACzEG,SAASV,GAAMU,SAAS3B,KAAKI,QAAQc,MAEvClB,MAAKO,SAAS2B,KAAKF,GACnBnC,EAAEW,OAAOR,MACRgC,QAAShC,KAAKO,SAAS4B,SACvBV,UAAWA,EACXG,WAAYA,EACZE,aAAcA,IAEf9B,KAAKgC,QAAQD,OAAOD,EAEpB,IAAIX,GAAQnB,KAAKI,QAAQe,OAASiB,KAAKC,IAAIZ,EAAUa,aAAcV,EAAWU,cAAeT,EAAcS,aAAa,EACpHlB,EAASpB,KAAKI,QAAQgB,QAAUgB,KAAKC,IAAIZ,EAAUc,cAAeX,EAAWW,cACjFd,GAAUE,SAAS,aACnBC,EAAWD,SAAS,cACpB3B,KAAKgC,QAAQQ,KAAMrB,MAAOA,EAAOC,OAAQA,IACrCpB,KAAKI,QAAQgB,SAChBK,EAAUe,IAAI,cAAef,EAAUL,SAAW,MAClDQ,EAAWY,IAAI,cAAeZ,EAAWR,SAAW,OAErDpB,KAAKyC,QAAO,GACZzC,KAAK0C,SAAQ,IAGdrC,EAAOgB,UAAUsB,OAAS,WACrB3C,KAAKO,SAAS0B,KAAK,WAAYjC,KAAKc,MACnCd,KAAKa,MAGXR,EAAOgB,UAAUR,GAAK,SAAU+B,GAC/B,MAAI5C,MAAKO,SAAS0B,KAAK,aAAoB,GAC3CjC,KAAKgC,QAAQa,YAAY7C,KAAKwB,UAAY,QAAQG,SAAS3B,KAAKuB,UAChEvB,KAAKO,SAAS0B,KAAK,WAAW,QACzBW,GAAQ5C,KAAK0C,aAGnBrC,EAAOgB,UAAUP,IAAM,SAAU8B,GAChC,MAAI5C,MAAKO,SAAS0B,KAAK,aAAoB,GAC3CjC,KAAKgC,QAAQa,YAAY7C,KAAKuB,UAAUI,SAAS3B,KAAKwB,UAAY,QAClExB,KAAKO,SAAS0B,KAAK,WAAW,QACzBW,GAAQ5C,KAAK0C,aAGnBrC,EAAOgB,UAAUyB,OAAS,WACzB9C,KAAKgC,QAAQe,WAAW,YACxB/C,KAAKO,SAAS0B,KAAK,YAAY,IAGhC5B,EAAOgB,UAAU2B,QAAU,WAC1BhD,KAAKgC,QAAQV,KAAK,WAAY,YAC9BtB,KAAKO,SAAS0B,KAAK,YAAY,IAGhC5B,EAAOgB,UAAUoB,OAAS,SAAUG,GAC/B5C,KAAKO,SAAS0B,KAAK,YAAajC,KAAKgD,UACpChD,KAAK8C,SACN9C,KAAKO,SAAS0B,KAAK,WAAYjC,KAAKa,GAAG+B,GACtC5C,KAAKc,IAAI8B,IAGfvC,EAAOgB,UAAUqB,QAAU,SAAUE,GACpC5C,KAAKO,SAASO,IAAI,oBACb8B,GAAQ5C,KAAKO,SAAS0C,SAC3BjD,KAAKO,SAASM,GAAG,mBAAoBhB,EAAEqD,MAAM,WAC5ClD,KAAKyC,UACHzC,QAGJK,EAAOgB,UAAU8B,QAAU,WAC1BnD,KAAKO,SAASO,IAAI,oBAClBd,KAAK8B,aAAasB,SAClBpD,KAAKO,SAAS8C,WAAW,aACzBrD,KAAKO,SAAS+C,SAiBf,IAAIC,GAAM1D,EAAE2D,GAAGC,eAEf5D,GAAE2D,GAAGC,gBAA8B3D,EACnCD,EAAE2D,GAAGC,gBAAgBC,YAAcrD,EAKnCR,EAAE2D,GAAGb,OAAOgB,WAAa,WAExB,MADA9D,GAAE2D,GAAGC,gBAAkBF,EAChBvD,MAMRH,EAAE,WACDA,EAAE,6CAA6C4D,oBAGhD5D,EAAE+D,UAAU/C,GAAG,kBAAmB,2BAA4B,SAASgD,GACtE,GAAIC,GAAYjE,EAAEG,MAAM+D,KAAK,uBAC7BD,GAAUL,gBAAgB,UAC1BI,EAAEG,oBAGFC"}

mfa/templates/FIDO2/Add.html

@@ -61,24 +61,21 @@
 
 {% endblock %}
 {% block content %}
-    <div class="col-lg-8 col-md-8 col-12 mx-auto">
+      <br/>
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+    <br/>
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+     <div class="container">
+     <div class="panel panel-default card">
+      <div class="panel-heading card-header">
+	      <strong> Adding a New {{ method.name }}</strong>
+      </div>
+      <div class="panel-body card-body">
+
+
+    <div class="row alert alert-pr" id="res" align="center">
+    <p style="color: green">Your browser should ask you to confirm you identity.</p>
+
     </div>
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
-        <div class="card-header pb-0 p-3">
-            <h6 class="mb-0"><strong> Adding a New {{ method.name }}</strong></h6>
-          </div>
-        <div class="card-body">
-
-            <div class="row alert alert-pr" id="res" align="center">
-                <p style="color: green">Your browser should ask you to confirm you identity.</p>
-            
-            </div>
-
-            
-
         </div>
-</div>
+    </div>
     {% include "modal.html" %}
 {% endblock %}

mfa/templates/FIDO2/recheck.html

@@ -1,44 +1,50 @@
 {%  load static %}
 <script type="application/javascript" src="{% static 'mfa/js/cbor.js' %}"></script>
 <script type="application/javascript" src="{% static 'mfa/js/ua-parser.min.js' %}"></script>
-    <div class="col-lg-8 col-md-8 col-12 mx-auto">
+<div class="row">
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2 offset-2 col-8">
-    </div>
+<div class="panel panel-default card">
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
+      <div class="panel-heading card-header">
-        <div class="card-header pb-0 p-3">
+	      <strong> Security Key</strong>
-            <h6 class="mb-0"><strong> Security Key</strong></h6>
+      </div>
-          </div>
+      <div class="panel-body card-body">
-        <div class="card-body">
 
-            <div class="row">
-                <div style="padding-left: 15px" class="col-md-10 col-md-offset-1" id="main_paragraph" align="center">
-                    {% if mode == "auth" %}
-                       Welcome back {% comment %}<img src="{% url 'getUserImage' request.session.base_username  %}" title="{{ request.session.base_username }}" style="padding: 3px;height: 50px" class="img-circle"/>{% endcomment %} {{ request.session.base_username }}<br/>
-                        <a href="{% url 'mfa_reset_cookie' %}">Not me</a>
-                        <br/>
-                    {% endif %}
-                    <div id="res">
-                        <p style="color: green">please press the button on your security key to prove it is you.</p>
-                    </div>
-                    <div id="msgdiv"></div>
-                    {% if mode == "auth" %}
-                        <form id="u2f_login" action="{% url 'fido2_complete_auth' %}" method="post" enctype="multipart/form-data">
-                    {% elif mode == "recheck" %}
-                        <form id="u2f_login" action="{% url 'fido2_recheck' %}" method="post" enctype="multipart/form-data">
-                    {% endif %}
-                            {% csrf_token %}
-                            <input type="hidden" name="response" id="response" value=""/>
-                        </form>
-                </div>
-            </div>
               <div class="row">
-                {% if request.session.mfa_methods|length > 1 %}
+            <div style="padding-left: 15px" class="col-md-10 col-md-offset-1" id="main_paragraph" align="center">
-                   <a href="{%  url 'mfa_methods_list' %}">Select Another Method</a>
+                {% if mode == "auth" %}
+                   Welcome back {% comment %}<img src="{% url 'getUserImage' request.session.base_username  %}" title="{{ request.session.base_username }}" style="padding: 3px;height: 50px" class="img-circle"/>{% endcomment %} {{ request.session.base_username }}<br/>
+                    <a href="{% url 'mfa_reset_cookie' %}">Not me</a>
+                    <br/>
+
+            {% endif %}
+                <div id="res">
+                    <p style="color: green">please press the button on your security key to prove it is you.</p>
+                </div>
+                <div id="msgdiv"></div>
+                {% if mode == "auth" %}
+                    <form id="u2f_login" action="{% url 'fido2_complete_auth' %}" method="post" enctype="multipart/form-data">
+                {% elif mode == "recheck" %}
+                    <form id="u2f_login" action="{% url 'fido2_recheck' %}" method="post" enctype="multipart/form-data">
                 {% endif %}
-            </div>
+              {% csrf_token %}
+              <input type="hidden" name="response" id="response" value=""/>
+          </form>
+      </div>
+                  </div>
+          </div>
+
+          <div class="row">
+          <div class="col-md-12 mb-3" style="padding-left: 25px">
+
+            {% if request.session.mfa_methods|length > 1 %}
+               <a href="{%  url 'mfa_methods_list' %}">Select Another Method</a>
+            {% endif %}
           </div>
         </div>
+      </div>
+</div>
+</div>
 </div>
 
     <script type="text/javascript">

mfa/templates/MFA.html

@@ -40,92 +40,86 @@
     <script src="{% static 'mfa/js/bootstrap-toggle.min.js'%}"></script>
 {% endblock %}
 {% block content %}
-
+{{block.super}}
-
+    <br/>
-    <div class="col-lg-10 col-md-10 col-12 mx-auto">
+    <br/>
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+    <div class="container">
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+    <div class="row">
-    </div>
+        <div class="offset-5 col-2" style="text-align: center">
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
+            <div class="btn-group">
-                <div class="card-body">
+            <button class="btn btn-success dropdown-toggle" data-toggle="dropdown" data-bs-toggle="dropdown">
-                        <div class="" style="text-align: center">
+                Add Method&nbsp;<span class="caret"></span>
-                            <div class="btn-group">
+            </button>
-                            <button class="btn btn-success dropdown-toggle" data-toggle="dropdown" data-bs-toggle="dropdown">
+            <ul class="dropdown-menu">
-                                Add Method&nbsp;<span class="caret"></span>
+                {% if not 'TOTP' in UNALLOWED_AUTHEN_METHODS %}
-                            </button>
+                    <li><a class="dropdown-item" href="{% url 'start_new_otop' %}">{% if 'TOTP' in RENAME_METHODS.keys %}{{ RENAME_METHODS.TOTP }}{% else %}Authenticator app{% endif %}</a></li>
-                            <ul class="dropdown-menu">
+                {% endif %}
-                                {% if not 'TOTP' in UNALLOWED_AUTHEN_METHODS %}
+                {% if not 'Email' in UNALLOWED_AUTHEN_METHODS %}
-                                    <li><a class="dropdown-item" href="{% url 'start_new_otop' %}">{% if 'TOTP' in RENAME_METHODS.keys %}{{ RENAME_METHODS.TOTP }}{% else %}Authenticator app{% endif %}</a></li>
+                    <li><a class="dropdown-item" href="{% url 'start_email' %}">{% if 'Email' in RENAME_METHODS.keys %}{{ RENAME_METHODS.Email }}{% else %}Email Token{% endif %}</a></li>
-                                {% endif %}
+                {% endif %}
-                                {% if not 'Email' in UNALLOWED_AUTHEN_METHODS %}
+                {% if not 'U2F' in UNALLOWED_AUTHEN_METHODS %}
-                                    <li><a class="dropdown-item" href="{% url 'start_email' %}">{% if 'Email' in RENAME_METHODS.keys %}{{ RENAME_METHODS.Email }}{% else %}Email Token{% endif %}</a></li>
+                    <li><a class="dropdown-item" href="{% url 'start_u2f' %}">{% if 'U2F' in RENAME_METHODS.keys %}{{ RENAME_METHODS.U2F }}{% else %}Security Key{% endif %}</a></li>
-                                {% endif %}
+                {% endif %}
-                                {% if not 'U2F' in UNALLOWED_AUTHEN_METHODS %}
+                {% if not 'FIDO2' in UNALLOWED_AUTHEN_METHODS %}
-                                    <li><a class="dropdown-item" href="{% url 'start_u2f' %}">{% if 'U2F' in RENAME_METHODS.keys %}{{ RENAME_METHODS.U2F }}{% else %}Security Key{% endif %}</a></li>
+                    <li><a class="dropdown-item" href="{% url 'start_fido2' %}">{% if 'FIDO2' in RENAME_METHODS.keys %}{{ RENAME_METHODS.FIDO2 }}{% else %}FIDO2 Security Key{% endif %}</a></li>
-                                {% endif %}
+                {% endif %}
-                                {% if not 'FIDO2' in UNALLOWED_AUTHEN_METHODS %}
+                {% if not 'Trusted_Devices' in UNALLOWED_AUTHEN_METHODS %}
-                                    <li><a class="dropdown-item" href="{% url 'start_fido2' %}">{% if 'FIDO2' in RENAME_METHODS.keys %}{{ RENAME_METHODS.FIDO2 }}{% else %}FIDO2 Security Key{% endif %}</a></li>
+                    <li><a class="dropdown-item" href="{% url 'start_td' %}">{% if 'Trusted_Devices' in  RENAME_METHODS.keys %}{{ RENAME_METHODS.Trusted_Devices }}{% else %}Trusted Device{% endif %}</a></li>
-                                {% endif %}
+                {% endif %}
-                                {% if not 'Trusted_Devices' in UNALLOWED_AUTHEN_METHODS %}
+            </ul>
-                                    <li><a class="dropdown-item" href="{% url 'start_td' %}">{% if 'Trusted_Devices' in  RENAME_METHODS.keys %}{{ RENAME_METHODS.Trusted_Devices }}{% else %}Trusted Device{% endif %}</a></li>
-                                {% endif %}
-                            </ul>
-                            </div>
-                        </div>
-                    </div>
-                    <div class="table-responsive">
-                       <table class="table table-responsive table-striped">
-                            <tr>
-                                <th>Type</th>
-                                <th>Date Added</th>
-                                <th>Expires On</th>
-                                <th>Device</th>
-                                <th>Last Used</th>
-                                <th>Status</th>
-                                <th>Delete</th>
-                            </tr>
-                            {% if keys %}
-                                {% for key in keys %}
-                                    <tr>
-                                        <td>{{ key.name }}</td>
-                                        <td>{{ key.added_on }}</td>
-                                        <td>{% if key.expires %}{{ key.expires }}{% else %}N/A{% endif %}</td>
-                                        <td>{% if key.device %}{{ key.device }}{% endif %}</td>
-                                        <td>{% if key.last_used %}{{ key.last_used }}{% else %}Never{% endif %}</td>
-                                        {% if key.key_type in HIDE_DISABLE %}
-                                            <td>{% if key.enabled %}On{% else %} Off{% endif %}</td>
-                                        {% else %}
-                                            <td><input type="checkbox" id="toggle_{{ key.id }}" {% if key.enabled %}checked{% endif %} data-onstyle="success" data-offstyle="danger"  onchange="toggleKey({{ key.id }})" data-toggle="toggle" class="status_chk"></td>
-                                        {% endif %}
-                                        <td>{% if key.key_type in HIDE_DISABLE %}
-                                        ----
-                                        {% else %}
-                                            <a href="javascript:void(0)" onclick="deleteKey({{ key.id }},'{{ key.key_type }}')"> <span class="fa fa-trash fa-solid fa-trash-can bi bi-trash-fill"></span></a></td>
-                                        {% endif %}
-                                    </tr>
-                                {% endfor %}
-                            {% if "RECOVERY" not in UNALLOWED_AUTHEN_METHODS %}
-                            <tr>
-                
-                                <td>{{ recovery.name }}</td>
-                                <td>{{ recovery.added_on }}</td>
-                                <td>N/A</td>
-                                <td>N/A</td>
-                                <td>{% if recovery.last_used %}{{ recovery.last_used }}{% else %}Never{% endif %}</td>
-                                <td>On</td>
-                                <td><a href="{% url 'manage_recovery_codes' %}"> <span class="fa fa-wrench fa-solid fa-wrench bi bi-wrench-fill"></span></a></td>
-                            </tr>
-                            {% endif %}
-                        {% else %}
-                           <tr><td colspan="7" align="center">You didn't have any keys yet.</td> </tr>
-                       {% endif %}
-                        </table>
-                    </div>
-                </div>          
-
             </div>
+        </div>
+    </div>
+    <br/>
+       <table class="table table-striped">
+           <tr>
 
-</div>
+               <th>Type</th>
+               <th>Date Added</th>
+               <th>Expires On</th>
+               <th>Device</th>
+               <th>Last Used</th>
+               <th>Status</th>
+               <th>Delete</th>
+           </tr>
+        {% if keys %}
+            {% for key in keys %}
+            <tr>
 
-{% include "modal.html" %}
+                <td>{{ key.name }}</td>
+                <td>{{ key.added_on }}</td>
+                <td>{% if key.expires %}{{ key.expires }}{% else %}N/A{% endif %}</td>
+                <td>{% if key.device %}{{ key.device }}{% endif %}</td>
+                <td>{% if key.last_used %}{{ key.last_used }}{% else %}Never{% endif %}</td>
+                    {% if key.key_type in HIDE_DISABLE %}
+                        <td>{% if key.enabled %}On{% else %} Off{% endif %}</td>
+                    {% else %}
+                        <td><input type="checkbox" id="toggle_{{ key.id }}" {% if key.enabled %}checked{% endif %} data-onstyle="success" data-offstyle="danger"  onchange="toggleKey({{ key.id }})" data-toggle="toggle" class="status_chk"></td>
+                    {% endif %}
+                <td>{% if key.key_type in HIDE_DISABLE %}
+                    ----
+                    {% else %}
+                        <a href="javascript:void(0)" onclick="deleteKey({{ key.id }},'{{ key.key_type }}')"> <span class="fa fa-trash fa-solid fa-trash-can bi bi-trash-fill"></span></a></td>
+                        {% endif %}
+            </tr>
+            {% endfor %}
+            {% if "RECOVERY" not in UNALLOWED_AUTHEN_METHODS %}
+            <tr>
+
+                <td>{{ recovery.name }}</td>
+                <td>{{ recovery.added_on }}</td>
+                <td>N/A</td>
+                <td>N/A</td>
+                <td>{% if recovery.last_used %}{{ recovery.last_used }}{% else %}Never{% endif %}</td>
+                <td>On</td>
+                <td><a href="{% url 'manage_recovery_codes' %}"> <span class="fa fa-wrench fa-solid fa-wrench bi bi-wrench-fill"></span></a></td>
+            </tr>
+            {% endif %}
+        {% else %}
+           <tr><td colspan="7" align="center">You didn't have any keys yet.</td> </tr>
+       {% endif %}
+        </table>
+    </div>
+    </div>
+    {% include "modal.html" %}
 {% endblock %}

mfa/templates/RECOVERY/Add.html

@@ -1,3 +1,4 @@
+
 {% extends "base.html" %}
 {% load static %}
 {% block head %}
@@ -97,27 +98,37 @@
     </script>
 {% endblock %}
 {% block content %}
-    <div class="col-lg-8 col-md-8 col-12 mx-auto">
+<br/>
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+<br/>
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+<div class="container d-flex justify-content-center">
-    </div>
+    <div class="col-md-6 col-md-offset-3" id="two-factor-steps">
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
+        
-        <div class="card-header pb-0 p-3">
+        <div class="row">
-            <h6 class="mb-0">
+            
-                Recovery Codes List
+            <h4>Recovery Codes List</h4>
-            </h6>
+        
-          </div>
-        <div class="card-body">
-            <div class="tokenrow mb-4" id="tokens">
-            </div>
-            <div class="row">
-                <div class="col-md-4 col-md-offset-4" style="padding-left: 0px" align="center">
-                    <button onclick="confirmRegenerateTokens()" class="btn btn-success">Regenerate</button>
-                </div>
-                <div class="col-md-6"  align="right" style="padding-right: 30px">
-                    <a href="{{redirect_html}}" class="btn btn-default btn-secondary" role="button"> {{reg_success_msg}}</a>
-                </div>
         </div>
+            
+        <div class="tokenrow" id="tokens">
+        
+        </div>
+         <br/>
+            <br/>
+        <div class="row">
+
+            <div class="col-md-4 col-md-offset-4" style="padding-left: 0px" align="center">
+
+                <button onclick="confirmRegenerateTokens()" class="btn btn-success">Regenerate</button>
+                
+            </div>
+
+            <div class="col-md-6"  align="right" style="padding-right: 30px">
+
+                <a href="{{redirect_html}}" class="btn btn-default btn-secondary" role="button"> {{reg_success_msg}}</a>
+
+            </div>
+        </div>
+    </div>
 </div>
 {% include "modal.html" %}
 {% endblock %}

mfa/templates/RECOVERY/recheck.html

@@ -22,55 +22,64 @@
         })
     }
 </script>
-    <div class="col-lg-8 col-md-8 col-12 mx-auto">
+<div class="row">
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-10 col-lg-offset-1">
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+<div class="panel panel-default card">
-    </div>
+      <div class="panel-heading card-header">
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
+	      <strong> Recovery code</strong>
-        <div class="card-header pb-0 p-3">
+      </div>
-            <h6 class="mb-0">
+      <div class="panel-body card-body">
-                Recovery code
+
-            </h6>
+      <FORM METHOD="POST" ACTION="{% url 'recovery_auth' %}" Id="formLogin" onSubmit="" name="FrontPage_Form1">
+
+
+      {% csrf_token %}
+          {%  if invalid %}
+          <div class="alert alert-danger">
+              Sorry, The provided code is not valid, or has already been used.
           </div>
-        <div class="card-body">
+          {% endif %}
-            <form METHOD="POST" ACTION="{% url 'recovery_auth' %}" Id="formLogin" onSubmit="" name="FrontPage_Form1">
+      {% if quota %}
-                {% csrf_token %}
+          <div class="alert alert-warning">
-                    {%  if invalid %}
+              {{ quota }}
-                        <div class="alert alert-danger">
+          </div>
-                            Sorry, The provided code is not valid, or has already been used.
+      {% endif %}
-                        </div>
+      <fieldset>
-                    {% endif %}
+      <div class="row">
-                {% if quota %}
+      <div class="col-sm-12 col-md-12">
-                    <div class="alert alert-warning">
+        <p>Enter the 11-digits on your authenticator. Or input a recovery code</p>
-                        {{ quota }}
+      </div>
-                    </div>
+      </div>
-                {% endif %}
-                <fieldset>
-                    <div class="row">
-                          <p>Enter the 11-digits on your authenticator. Or input a recovery code</p>
-                    </div>
 
-                    <div class="row">
+      <div class="row">
-                        <div class="form-group">
+	  <div class="col-sm-12 col-md-12">
-                            <div class="input-group input-group-static mb-3">
+	    <div class="form-group">
-                                <span class="input-group-addon input-group-text">
+	      <div class="input-group mb-3">
-                                    <i class="glyphicon glyphicon-lock bi bi-lock"></i>
+		<span class="input-group-addon input-group-text">
-                                </span>
+		<i class="glyphicon glyphicon-lock bi bi-lock"></i>
-                                <input class="form-control" size="11" MaxLength="11" value="" placeholder="e.g abcde-fghij" name="recovery" type="text" id="recovery" autofocus>
+		</span>
-                            </div>
+		<input class="form-control" size="11" MaxLength="11" value="" placeholder="e.g abcde-fghij" name="recovery" type="text" id="recovery" autofocus>
 
-                            <div class="form-group d-grid gap-2">
+	      </div>
-                                <input type="{% if mode == "auth" %}submit{% elif mode == 'recheck'  %}button{% endif %}" {% if mode == "recheck" %}onclick="send_recovery()" {% endif %} class="btn btn-lg btn-success btn-block" value="Sign in">
+	    </div>
-                            </div>
+
-                        </div>
+          <div class="form-group d-grid gap-2">
-                    </div>
+
-                </fieldset>
+            <input type="{% if mode == "auth" %}submit{% elif mode == 'recheck'  %}button{% endif %}" {% if mode == "recheck" %}onclick="send_recovery()" {% endif %} class="btn btn-lg btn-success btn-block" value="Sign in">
-            </form>
+	      </div>
-            <div class="row">
+      </div>
-                {% if request.session.mfa_methods|length > 1 %}
+      </fieldset>
-                    <a href="{%  url 'mfa_methods_list' %}">Select Another Method</a>
+      </FORM>
-                {% endif %}
+      </div>
-            </div>
+        <div class="row">
+        <div class="col-md-12 mb-3" style="padding-left: 25px">
+            {% if request.session.mfa_methods|length > 1 %}
+                <a href="{%  url 'mfa_methods_list' %}">Select Another Method</a>
+            {% endif %}
         </div>
+        </div>
+	      </div>
+              </div>
+</div>
 </div>
 {% include "modal.html" %}

mfa/templates/TOTP/Add.html

@@ -1,8 +1,13 @@
+
 {% extends "base.html" %}
 {% load static %}
 {% block head %}
 <style>
-
+    #two-factor-steps {
+	border: 1px solid #ccc;
+	border-radius: 3px;
+	padding: 15px;
+    }
     .row{
         margin: 0px;
     }
@@ -82,59 +87,47 @@
 {% block content %}
 <br/>
 <br/>
-<div class="container-fluid px-2 px-md-4">
+<div class="container d-flex justify-content-center">
-  <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+    <div class="col-md-6 col-md-offset-3" id="two-factor-steps">
-    <span class="mask  bg-gradient-primary  opacity-6"></span>
+        <div class="row" align="center">
-  </div>
+            <h4>Adding a new {{ method.name }}</h4>
+        </div>
+        <div class="row">
 
+            <p>Scan the image below with the two-factor authentication app on your <a href="javascript:void(0)" onclick="showTOTP()">phone/PC</a>. If you can’t use a barcode,
+                <a href="javascript:void(0)" onclick="showKey()">enter this text</a> instead. </p>
+        </div>
+        <div id="res">
 
+        </div>
+        <div class="row" style="text-align: center">
 
+            <div align="center" style="display: none;text-align: center;align-content: center" id="second_step">
 
-            <div class="card mx-3 mx-md-4 mt-n6 h-100" id="two-factor-steps" >
+                <img id="qr"/>
-                <div class="card-header pb-0 p-3">
-                    <h6 class="mb-0">Adding a new {{ method.name }}</h6>
-                </div>
-                <div class="card-body p-3">
-                    <div class="row">
 
-                        <p>Scan the image below with the two-factor authentication app on your <a href="javascript:void(0)" onclick="showTOTP()">phone/PC</a>. If you can’t use a barcode,
+            </div>
-                            <a href="javascript:void(0)" onclick="showKey()">enter this text</a> instead. </p>
+        </div>
-                    </div>
+            <div class="row">
-                        <div id="res">
 
-                        </div>
+                <p><b>Enter the six-digit code from the application</b></p>
-                        <div class="row" style="text-align: center">
+                <p style="color: #333333;font-size: 10px">After scanning the barcode image, the app will display a six-digit code that you can enter below. </p>
 
-                        <div align="center" style="display: none;text-align: center;align-content: center" id="second_step">
+            </div>
-                        
+            <div class="row">
-                            <img id="qr"/>
+                <div class="offset-md-4 col-md-4">
-                        
+                <input style="display: inline;width: 95%" maxlength="6" size="6" class="form-control" id="answer" placeholder="e.g 785481"/>
-                        </div>
-                        </div>
-                        <div class="row">
-                        
-                            <p><b>Enter the six-digit code from the application</b></p>
-                            <p >After scanning the barcode image, the app will display a six-digit code that you can enter below. </p>
-                        
-                        </div>
-                        <div class="row">
-                            <div class="offset-md-4 col-md-4">
-                                <div class="input-group input-group-static">
-                            <input style="display: inline;width: 95%" maxlength="6" size="6" class="form-control" id="answer" placeholder="e.g 785481"/>
-                                </div>
-                            </div>
-                        </div>
-                        <div class="row" style="padding-top: 10px;">
-                            <div class="offset-md-4 col-md-4">
-                                <button class="btn btn-success" onclick="verify()">Enable</button>
-                                <a href="{% url 'mfa_home' %}" class="btn btn-default btn-secondary" role="button">Cancel</a>
-                            </div>
-                        </div>
-                    </div>
                 </div>
             </div>
+            <div class="row" style="padding-top: 10px;">
+                <div class="col-md-4 offset-md-4" style="padding-left: 0px">
+                    <button class="btn btn-success" onclick="verify()">Enable</button>
+                    <a href="{% url 'mfa_home' %}" class="btn btn-default btn-secondary" role="button">Cancel</a>
+                </div>
+            </div>
+        </div>
 
-
+    </div>
 </div>
 {% include "modal.html" %}
 {% endblock %}

mfa/templates/TOTP/Auth.html

@@ -1,10 +1,10 @@
 {% extends "mfa_auth_base.html" %}
 {% block head %}
-    <!--<style>
+    <style>
     .row{
         margin-left: 15px;
     }
-    </style>-->
+    </style>
 {% endblock %}
 {% block content %}
 <br/>

mfa/templates/TOTP/recheck.html

@@ -1,64 +1,77 @@
-{% extends "mfa_auth_base.html" %}
+<script type="application/javascript">
-{% load static %}
+    function send_totp() {
+        $.ajax({"url":"{% url 'totp_recheck' %}", method:"POST",dataType:"JSON",
+            data:{"csrfmiddlewaretoken":"{{ csrf_token }}","otp":$("#otp").val()},
+         success:function (data) {
+                            if (data["recheck"])
+                                mfa_success_function();
+                            else {
+                                mfa_failed_function();
+                            }
+                        }
+        })
+    }
+</script>
+<div class='container'>
+<div class="row">
 
-{% block content %}
+<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2">
+<div class="panel panel-default card">
+      <div class="panel-heading card-header">
+	      <strong> One Time Password</strong>
+      </div>
+      <div class="panel-body card-body">
+
+      <FORM METHOD="POST" ACTION="{% url 'totp_auth' %}" Id="formLogin" onSubmit="" name="FrontPage_Form1">
 
 
-    <div class="col-lg-8 col-md-8 col-12 mx-auto">
+      {% csrf_token %}
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+          {%  if invalid %}
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+          <div class="alert alert-danger">
-    </div>
+              Sorry, The provided token is not valid.
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
+          </div>
-                <div class="card-header pb-0 p-3 ">
+          {% endif %}
-                    <h6 class="mb-0">One Time Password</h6>
+      {% if quota %}
-                </div>
+          <div class="alert alert-warning">
-                <div class="card-body">
+              {{ quota }}
-                    <form METHOD="POST" ACTION="{% url 'totp_auth' %}" Id="formLogin" onSubmit="" name="FrontPage_Form1">
+          </div>
-                        {% csrf_token %}
+      {% endif %}
-                            {%  if invalid %}
+      <fieldset>
-                            <div class="alert alert-danger">
+      <div class="row">
-                                Sorry, The provided token is not valid.
+      <div class="col-sm-12 col-md-12">
-                            </div>
+        <p>Enter the 6-digits on your authenticator</p>
-                            {% endif %}
+      </div>
-                        {% if quota %}
+      </div>
-                            <div class="alert alert-warning">
-                                {{ quota }}
-                            </div>
-                        {% endif %}
-                        <fieldset>
 
-                            <div class=" text-left">
+      <div class="row">
-                              <p>Enter the 6-digits on your authenticator</p>
+	  <div class="col-sm-12 col-md-12">
-                            </div>
+	    <div class="form-group">
+	      <div class="input-group mb-3">
+		<span class="input-group-addon input-group-text">
+		<i class="glyphicon glyphicon-lock bi bi-lock"></i>
+		</span>
+		<input class="form-control" size="6" MaxLength="6" value="" placeholder="e.g 55552" name="otp" type="text" id="otp" autofocus>
 
+	      </div>
+	    </div>
 
-                                  <div class="form-group">
+          <div class="form-group d-grid gap-2">
-                                    <div class="input-group input-group-dynamic mb-3">
-                                        <span class="input-group-addon input-group-text">
-                                            <i class="glyphicon glyphicon-lock bi bi-lock"></i>
-                                        </span>
-                                        <input class="form-control" size="6" MaxLength="6" value="" placeholder="e.g 55552" name="otp"  type="text"  id="otp" autofocus>
-                                    </div>
-                                  </div>
 
-                                  <div class="form-group d-grid gap-2">
+            <input type="{% if mode == "auth" %}submit{% elif mode == 'recheck'  %}button{% endif %}" {% if mode == "recheck" %}onclick="send_totp()" {% endif %} class="btn btn-lg btn-success btn-block" value="Sign in">	      </div>
-                                      <input type="{% if mode == "auth" %}submit{% elif mode == 'recheck'  %}button{% endif %}" {% if mode ==       "recheck" %}onclick="send_totp()" {% endif %} class="btn btn-lg btn-success btn-block" value="Sign in">
+      </div>
-                                  </div>
+      </fieldset>
-
+      </FORM>
-
+      </div>
-                        </fieldset>
+        <div class="row">
-                    </form>
+        <div class="col-md-12 mb-3" style="padding-left: 25px">
-                    
+            {% if request.session.mfa_methods|length > 1 %}
-
+                <a href="{%  url 'mfa_methods_list' %}">Select Another Method</a>
-                    <div class="">
+            {% endif %}
-                        {% if request.session.mfa_methods|length > 1 %}
+        </div>
-                            <a href="{%  url 'mfa_methods_list' %}">Select Another Method</a>
+        </div>
-                        {% endif %}
+	      </div>
-                    </div>
+              </div>
-
+	      </div>
-                </div>
+	      </div>
-    </div>
 </div>
-
 {% include "modal.html" %}
-{% endblock %}

mfa/templates/TrustedDevices/Add.html

@@ -25,88 +25,101 @@
     </script>
 {% endblock %}
 {% block content %}
-    <div class="col-lg-8 col-md-8 col-12 mx-auto">
+    <br/>
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+    <br/>
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+
-    </div>
+<div class="row">
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
+
-        <div class="card-header pb-0 p-3">
+<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2">
-            <h6 class="mb-0">
+<div class="panel panel-default card">
-                <strong> Add Trusted Device</strong>
+      <div class="panel-heading card-header">
-            </h6>
+	      <strong> Add Trusted Device</strong>
+      </div>
+      <div class="panel-body card-body">
+        {%  if success %}
+            <div class="alert alert-warning">
+                Please check your PC window, to continue the process.
+            </div>
+        {% elif added %}
+            <div class="alert alert-success">
+                Your device is now trusted, please try to <a href="{% url 'login' %}"> login</a>
+            </div>
+
+      {% else %}
+            <div class="alert alert-warning">Please make sure you are not in private (incognito) mode <i class="fal fa-user-secret"></i></div>
+      <FORM METHOD="POST" ACTION="{% url 'add_td' %}" Id="formLogin" onSubmit="return checkFlag()" name="FrontPage_Form1">
+      {% csrf_token %}
+          {%  if invalid %}
+          <div class="alert alert-danger">
+              {{ invalid }}
           </div>
-        <div class="card-body">
+          {% endif %}
-            {%  if success %}
+      {% if quota %}
-                <div class="alert alert-warning">
+          <div class="alert alert-warning">
-                    Please check your PC window, to continue the process.
+              {{ quota }}
-                </div>
+          </div>
-            {% elif added %}
+      {% endif %}
-                <div class="alert alert-success">
+      <fieldset>
-                    Your device is now trusted, please try to <a href="{% url 'login' %}"> login</a>
+      <div class="row">
-                </div>
+      <div class="col-sm-12 col-md-12">
+      </div>
+      </div>
+      <div class="row">
+	  <div class="col-sm-12 col-md-12">
+	    <div class="form-group">
+	      <div class="input-group mb-3">
+		<span class="input-group-addon input-group-text">
+		<i class="glyphicon glyphicon-user bi bi-person"></i>
+		</span>
+		<input class="form-control" id="username" size="30" MaxLength="30" placeholder="Username" name="username" value="{{ username }}" type="text" autofocus autocomplete="on">
 
-            {% else %}
+	      </div>
-                <div class="alert alert-warning text-white">Please make sure you are not in private (incognito) mode <i class="fa fa-user-secret"></i></div>
+	    </div>
-                <form METHOD="POST" ACTION="{% url 'add_td' %}" Id="formLogin" onSubmit="return checkFlag()" name="FrontPage_Form1">
+	    <div class="form-group">
-                {% csrf_token %}
+		<div class="input-group mb-3">
-                {%  if invalid %}
+		<span class="input-group-addon input-group-text">
-                    <div class="alert alert-danger">
+		<i class="fa fa-key"></i>
-                        {{ invalid }}
+		</span>
-                    </div>
+		<input class="form-control" placeholder="e.g GAK-Y2M" id='key' style="text-transform: uppercase" name="key" type="text" size="9" MaxLength="9" value="{{ key }}">
-                {% endif %}
+		</div>
-                {% if quota %}
+	    </div>
-                    <div class="alert alert-warning">
+           <div class="form-group">
-                        {{ quota }}
+		<span class="input-group mb-3">
-                    </div>
+            <input id='agree' name="agree" type="checkbox"><span style="color: red"> I confirm that this device is mine and it is only used by me.</span>
-                {% endif %}
-                    <fieldset>
 
-                        <div class="row">
+	    </div>
-                            <div>
+      {% comment %}
-                                <div class="form-group">
+	    <div class="form-group">
-                                    <div class="input-group input-group-static mb-3">
+	      <div class="input-group mb-3">
-                                        <span class="input-group-addon input-group-text">
+	      <span class="input-group-addon input-group-text">
-                                            <i class="glyphicon glyphicon-user bi bi-person"></i>
+
-                                        </span>
+
-                                        <input class="form-control" id="username" size="30" MaxLength="30" placeholder="Username" name="username" value="{{ username }}" type="text" autofocus autocomplete="on">
+	      <select size="1" name="Institution_Code" style="font-size: 10pt; font-family: Calibri; height: 34px;width: 230px">
-                                    </div>
+              {%  for ins in institutes %}
-                                </div>
+                <option value="{{ ins.institution_code }}">{{ ins.alias }}</option>
-                                <div class="form-group">
+              {% endfor %}
-                                    <div class="input-group input-group-static mb-3">
+
-                                        <span class="input-group-addon input-group-text">
+		</select>
-                                            <i class="fa fa-key"></i>
+	      </span>
-                                        </span>
+	      </div>
-                                        <input class="form-control" placeholder="e.g GAK-Y2M" id='key' style="text-transform: uppercase" name="key" type="text" size="9" MaxLength="9" value="{{ key }}">
+	      </div>
-                                    </div>
+	      {% endcomment %}
-                                </div>
+	      <div class="form-group d-grid gap-2">
-                                <div class="form-group">
+	      <input type="submit" class="btn btn-lg btn-success btn-block" value="Trust Device">
-                                    <span class=" form-check ">
+	      </div>
-                                        <input class="form-check-input" id='agree' name="agree" type="checkbox">
+	      </div>
-                                            <span style="color: red"> I confirm that this device is mine and it is only used by me.
+	      </div>
-                                            </span>
+	      </fieldset>
-                                </div>
+	      </form>
-                                {% comment %}
+      {% endif %}
-                                <div class="form-group">
+	      </div>
-                                    <div class="input-group mb-3">
+	      <div class="panel-footer card-footer">
-                                        <span class="input-group-addon input-group-text">
+
-                                            <select size="1" name="Institution_Code" style="font-size: 10pt; font-family: Calibri; height: 34px;width: 230px">
+
-                                                {%  for ins in institutes %}
+	      </div>
-                                                  <option value="{{ ins.institution_code }}">{{ ins.alias }}</option>
+              </div>
-                                                {% endfor %}
+	      </div>
-                                            </select>
+	      </div>
-                                        </span>
+
-                                    </div>
+
-                                </div>
+  {% endblock %}
-                                {% endcomment %}
-                                <div class="form-group d-grid gap-2 mt-2">
-                                    <input type="submit" class="btn btn-lg btn-success btn-block" value="Trust Device">
-                                </div>
-                            </div>
-                        </div>
-                    </fieldset>
-                </form>
-                {% endif %}
-        </div>
-</div>
-    {% include "modal.html" %}
-{% endblock %}

mfa/templates/TrustedDevices/start.html

@@ -1,7 +1,5 @@
 {% extends "base.html" %}
-{% load static %}
 {% block head %}
-    <script src="{% static 'mfa/js/qrious.min.js' %}" type="text/javascript"></script>
     <style>
     #two-factor-steps {
 	border: 1px solid #ccc;
@@ -14,12 +12,6 @@
     </style>
 
     <script type="text/javascript">
-    $(document).ready(function (){
-        var qr = new QRious({
-          element: document.getElementById('qr'),
-          value: "{{ url }}?u={{ request.user.username }}&k={{ key }}"
-        });
-    })
     function sendEmail() {
         $("#modal-title").html("Send Link")
         $("#modal-body").html("Sending Email, Please wait....");
@@ -78,58 +70,33 @@
     </script>
 {% endblock %}
 {% block content %}
-<div class="col-lg-8 col-md-8 col-12 mx-auto">
+      <br/>
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+    <br/>
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+    <div class="container">
+        <div class="col-md-6 col-md-offset-3" id="two-factor-steps">
+            <div class="row" align="center">
+                <h4>Add Trusted Device</h4>
+            </div>
+
+    <div class="row" >
+        {%  if not_allowed %}
+            <div class="alert alert-danger">You can't add any more devices, you need to remove previously trusted devices first.</div>
+        {% else %}
+    <p style="color: green">Allow access from mobile phone and tables.</p>
+    <h5>Steps:</h5>
+        <ol>
+            <li>Using your mobile/table, open Chrome/Firefox.</li>
+            <li>Go to <b>{{ HOST }}{{ BASE_URL }}devices/add</b>&nbsp;&nbsp;<a href="javascript:void(0)" onclick="sendEmail()" title="Send to my email"><i class="fas fa-paper-plane"></i></a></li>
+            <li>Enter your username & following 6 digits<br/>
+                <span style="font-size: 16px;font-weight: bold; margin-left: 50px">{{ key|slice:":3" }} - {{ key|slice:"3:" }}</span>
+            </li>
+            <li>This window will ask to confirm the device.</li>
+
+        </ol>
+    {% endif %}
     </div>
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
-        <div class="card-header pb-0 p-3">
-            <h6 class="mb-0">
-                Add Trusted Device
-            </h6>
-          </div>
-        <div class="card-body">
-            {%  if not_allowed %}
-                <div class="alert alert-danger">You can't add any more devices, you need to remove previously trusted devices first.</div>
-            {% else %}
-                <p style="color: green">Allow access from mobile phone and tables.</p><br/>
-                <br/>
-            <div class="row">
-                <h5>Steps:</h5>
-            </div>
-
-            <div class="row">
-                <div class="col-md-6">
-                    <h5>Using Camera</h5>
-                    <ol>
-                        <li>Using your mobile/table, open Chrome/Firefox.</li>
-                        <li>Scan the following barcode <br/>
-                            <img id="qr"/> <br/>
-                        </li>
-                        <li>Confirm the consent and submit form.</li>
-                    </ol>
-                </div>
-                <div class="col-md-6">
-                    <h5>Manual</h5>
-                    <ol>
-                        <li>Using your mobile/table, open Chrome/Firefox.</li>
-                        <li>Go to <b>{{ url }}</b>&nbsp;&nbsp;</li>
-                        <li>Enter your username & following 6 digits<br/>
-                            <span style="font-size: 16px;font-weight: bold; margin-left: 50px">{{ key|slice:":3" }} - {{ key|slice:"3:" }}</span>
-                        </li>
-                        <li>Confirm the consent and submit form.</li>
-                </div>
-            </div>
-            <div class="row">
-                This window will ask to confirm the device.
-            </div>
-
-
-            {% endif %}           
         </div>
-</div>           
+    </div>
-        </div>
-</div>
     {% include "modal.html" %}
     {% include 'mfa_check.html' %}
 {% endblock %}

mfa/templates/U2F/Add.html

@@ -1,7 +1,16 @@
 {% extends "base.html" %}
 {% load static %}
 {% block head %}
-
+    <style>
+    #two-factor-steps {
+	border: 1px solid #ccc;
+	border-radius: 3px;
+	padding: 15px;
+}
+    .row{
+        margin: 0px;
+    }
+    </style>
     <script src="{% static 'mfa/js/u2f-api.js' %}" type="text/javascript"></script>
     <script type="text/javascript">
     function addToken() {
@@ -34,29 +43,20 @@
     </script>
 {% endblock %}
 {% block content %}
-    <div class="col-lg-8 col-md-8 col-12 mx-auto">
+      <br/>
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+    <br/>
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+    <div class="container">
-    </div>
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
-                <div class="card-body">
-                    <br/>
-                    <br/>
-                    <div class="container">
 
-                        <div id="two-factor-steps">
+        <div class="col-md-6 col-md-offset-3" id="two-factor-steps">
-                            <div id="res"></div>
+            <div id="res"></div>
-                            <div class="row" align="center">
+            <div class="row" align="center">
-                                <h4>Adding {{ method.name}}</h4>
+                <h4>Adding {{ method.name}}</h4>
-                            </div>
-                            <div class="row" align="center">
-                                <p style="color: green">Your secure Key should be flashing now, please press on button.</p>
-                            </div>
-
-                        </div>
-                    </div>
             </div>
+    <div class="row">
+    <p style="color: green">Your secure Key should be flashing now, please press on button.</p>
 
-</div>
+    </div>
+        </div>
+    </div>
     {% include "modal.html" %}
 {% endblock %}

mfa/templates/U2F/recheck.html

@@ -1,39 +1,39 @@
 {% load static %}
-<    <div class="col-lg-8 col-md-8 col-12 mx-auto">
+<div class="row">
-    <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+
-      <span class="mask  bg-gradient-primary  opacity-6"></span>
+<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2">
-    </div>
+<div class="panel panel-default card">
-    <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom "  >
+      <div class="panel-heading card-header">
-        <div class="card-header pb-0 p-3">
+	      <strong> Verify your identity using {{ method.name }}</strong>
-            <h6 class="mb-0">Verify your identity using {{ method.name }}</h6>
+      </div>
+      <div class="panel-body card-body">
+
+              <div class="row">
+            <div style="padding-left: 15px" class="col-md-10 col-md-offset-1" id="main_paragraph" align="center">
+                <p style="color: green">Your key should be flashing now, please press the button.</p>
+                {% if mode == "auth" %}
+                    <form id="u2f_login" action="{% url 'u2f_verify' %}" method="post">
+                {% elif mode == "recheck" %}
+                    <form id="u2f_login" action="{% url 'u2f_recheck' %}" method="post">
+                {% endif %}
+              {% csrf_token %}
+              <input type="hidden" name="response" id="response" value=""/>
+          </form>
+      </div>
+                  </div>
           </div>
-        <div class="card-body">
-
-            <div class="row">
-                <div id="main_paragraph" align="center">
-                    <p style="color: green">Your key should be flashing now, please press the button.</p>
-                    {% if mode == "auth" %}
-                        <form id="u2f_login" action="{% url 'u2f_verify' %}" method="post">
-                    {% elif mode == "recheck" %}
-                        <form id="u2f_login" action="{% url 'u2f_recheck' %}" method="post">
-                    {% endif %}
-                    {% csrf_token %}
-                        <input type="hidden" name="response" id="response" value=""/>
-                        </form>
-                </div>
-            </div>
-                
-            <div class="row">
-
-                    {% if request.session.mfa_methods|length > 1 %}
-                        <a href="{%  url 'mfa_methods_list' %}">Select Another Method</a>
-                    {% endif %}
-
-            </div>
-
 
+          <div class="row">
+          <div class="col-md-12 mb-3" style="padding-left: 15px">
 
+            {% if request.session.mfa_methods|length > 1 %}
+                <a href="{%  url 'mfa_methods_list' %}">Select Another Method</a>
+            {% endif %}
+          </div>
         </div>
+      </div>
+</div>
+</div>
 </div>
     <script src="{% static 'mfa/js/u2f-api.js' %}" type="text/javascript"></script>
 

mfa/templates/select_mfa_method.html

@@ -1,31 +1,32 @@
 {% extends "mfa_auth_base.html" %}
 {% block content %}
+<br/>
+<div class='container'>
+<div class="row">
 
-<div class="container-fluid px-2 px-md-4 mt-6">
+<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2 offset-2 col-8">
-  <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
+<div class="panel panel-default card">
-    <span class="mask  bg-gradient-primary  opacity-6"></span>
+      <div class="panel-heading card-header">
-  </div>
+	      <strong> Select Second Verification Method</strong>
-              <div class="card mx-3 mx-md-4 mt-n6 h-100"  >
+      </div>
-                <div class="card-header pb-0 p-3">
+      <div class="panel-body card-body">
-                    <h6 class="mb-0">Select Second Verification Method</h6>
+          <ul>
-                </div>
+              {% for method in request.session.mfa_methods %}
-                <div class="card-body p-3">
-                    <div class="panel-body card-body">
-                        <ul>
-                            {% for method in request.session.mfa_methods %}
 
-                            <li  style="list-style-type: none;"><a class="btn btn-sm btn-outline-primary" href="{% url 'mfa_goto' method %}" >
+              <li><a href="{% url "mfa_goto" method %}">
-                                {% if method == "TOTP" %}{% if 'TOTP' in RENAME_METHODS %}{{ RENAME_METHODS.TOTP }}{% else %}Authenticator App{% endif %}
+                  {% if method == "TOTP" %}{% if 'TOTP' in RENAME_METHODS %}{{ RENAME_METHODS.TOTP }}{% else %}Authenticator App{% endif %}
-                                {% elif method == "Email" %}{% if 'Email' in RENAME_METHODS %}{{ RENAME_METHODS.Email }}{% else %}Send OTP by Email{% endif %}
+                  {% elif method == "Email" %}{% if 'Email' in RENAME_METHODS %}{{ RENAME_METHODS.Email }}{% else %}Send OTP by Email{% endif %}
-                                {% elif method == "U2F" %}{% if 'U2F' in RENAME_METHODS %}{{ RENAME_METHODS.U2F }}{% else %}Secure Key{% endif %}
+                  {% elif method == "U2F" %}{% if 'U2F' in RENAME_METHODS %}{{ RENAME_METHODS.U2F }}{% else %}Secure Key{% endif %}
-                                {% elif method == "FIDO2" %}{% if 'FIDO2' in RENAME_METHODS %}{{ RENAME_METHODS.FIDO2 }}{% else %}FIDO2 Secure Key{% endif %}
+                  {% elif method == "FIDO2" %}{% if 'FIDO2' in RENAME_METHODS %}{{ RENAME_METHODS.FIDO2 }}{% else %}FIDO2 Secure Key{% endif %}
-                                {% elif method == "RECOVERY" %}{% if 'RECOVERY' in RENAME_METHODS %}{{ RENAME_METHODS.RECOVERY }}{% else %}Recovery Code{% endif %}
+                  {% elif method == "RECOVERY" %}{% if 'RECOVERY' in RENAME_METHODS %}{{ RENAME_METHODS.RECOVERY }}{% else %}Recovery Code{% endif %}
-                                {% endif %}
+                  {% endif %}
-                            </a> </li>
+              </a> </li>
-                            {% endfor %}
+              {% endfor %}
-                        </ul>
+          </ul>
-                    </div>
+      </div>
-                </div>
+</div>
-            </div>
+</div>
+
+</div>
 </div>
 {% endblock %}

setup.py

@@ -4,7 +4,7 @@ from setuptools import find_packages, setup
 
 setup(
     name='django-mfa2',
-    version='2.8.0',
+    version='2.5.0',
     description='Allows user to add 2FA to their accounts',
     long_description=open("README.md").read(),
     long_description_content_type="text/markdown",
@@ -17,6 +17,7 @@ setup(
     packages=find_packages(),
     install_requires=[
         'django >= 2.0',
+        'jsonfield',
         'simplejson',
         'pyotp',
         'python-u2flib-server',
@@ -24,13 +25,13 @@ setup(
         'user-agents',
         'python-jose',
         'fido2 == 1.0.0',
+        'jsonLookup'
       ],
     python_requires=">=3.5",
     include_package_data=True,
     zip_safe=False, # because we're including static files
     classifiers=[
         "Development Status :: 5 - Production/Stable",
-        #"Development Status :: 4 - Beta",
         "Environment :: Web Environment",
         "Framework :: Django",
         "Framework :: Django :: 2.0",
@@ -40,7 +41,6 @@ setup(
         "Framework :: Django :: 3.1",
         "Framework :: Django :: 3.2",
         "Framework :: Django :: 4.0",
-        "Framework :: Django :: 4.1",
         "Intended Audience :: Developers",
         "Operating System :: OS Independent",
         "Programming Language :: Python",
@@ -51,7 +51,6 @@ setup(
         "Programming Language :: Python :: 3.8",
         "Programming Language :: Python :: 3.9",
         "Programming Language :: Python :: 3.10",
-        "Programming Language :: Python :: 3.11",
         "Topic :: Software Development :: Libraries :: Python Modules",
 ]
 )