Compare commits

..

39 Commits

Author SHA1 Message Date
fa0fd3172c Update mfa/helpers.py 2024-02-14 16:23:53 +00:00
fcfc6904b6 Update mfa/helpers.py 2024-02-14 16:16:53 +00:00
ace60d7343 Update mfa/helpers.py 2024-02-05 11:35:27 +00:00
aa76553edb Update mfa/templates/TrustedDevices/start.html 2024-02-05 10:49:54 +00:00
33938ac6e8 Update mfa/templates/MFA.html 2024-02-02 16:08:06 +00:00
5c799f15e9 Update mfa/templates/MFA.html 2024-02-02 16:01:51 +00:00
f33631ab48 Update mfa/templates/RECOVERY/recheck.html 2024-02-02 15:59:11 +00:00
11079528cb Update mfa/templates/RECOVERY/Add.html 2024-02-02 15:55:59 +00:00
b4ca28479a Update mfa/templates/TrustedDevices/start.html 2024-02-02 15:52:57 +00:00
e1d2bfa330 Update mfa/templates/TrustedDevices/start.html 2024-02-02 15:51:42 +00:00
a9ac8e7709 Update mfa/templates/TrustedDevices/Add.html 2024-02-02 15:47:47 +00:00
97ba9eeb44 Update mfa/templates/FIDO2/recheck.html 2024-02-02 15:34:22 +00:00
71a0378ef7 Update mfa/templates/FIDO2/Add.html 2024-02-02 15:31:55 +00:00
7055a7da02 Update mfa/templates/U2F/recheck.html 2024-02-02 15:30:39 +00:00
e63e315f29 Update mfa/templates/U2F/Add.html 2024-02-02 15:26:29 +00:00
b381a43927 Update mfa/templates/MFA.html 2024-02-02 15:23:42 +00:00
a31ecff6ef Update mfa/templates/TOTP/recheck.html 2024-02-02 13:57:11 +00:00
3eab9cbd46 Update mfa/templates/select_mfa_method.html 2024-02-02 12:56:43 +00:00
fc301a5a06 Update mfa/templates/TOTP/Add.html 2024-02-02 12:49:16 +00:00
c71c6d7cab Update mfa/templates/TOTP/Add.html 2024-02-02 12:40:03 +00:00
79e9e906dd Update mfa/templates/TOTP/Add.html 2024-02-02 12:20:08 +00:00
fe1e2abd6f Update mfa/templates/TOTP/Add.html 2024-02-02 12:16:44 +00:00
5db1bdca81 Update mfa/templates/TOTP/Add.html 2024-02-02 12:15:32 +00:00
1c15c74444 Update mfa/templates/TOTP/Add.html 2024-02-02 12:01:06 +00:00
bc59406713 Update mfa/templates/TOTP/recheck.html 2024-02-02 11:29:45 +00:00
3ea974f750 Update mfa/templates/TOTP/recheck.html 2024-02-02 11:26:19 +00:00
37184edfb9 Update mfa/templates/TOTP/recheck.html 2024-02-02 11:22:09 +00:00
62a240ac28 Update mfa/templates/TOTP/recheck.html 2024-02-02 11:19:53 +00:00
aa1d417c08 Update mfa/templates/TOTP/Auth.html 2024-02-02 11:11:08 +00:00
Mohamed El-Kalioby
77905b0e83 Merge pull request #81 from camposmoreira/chore/create-map-for-js
Creating .map versions for bootstrap and qrious
2024-01-06 10:44:48 +03:00
Moreira
1fe11273e3 Creating .map versions for bootstrap and qrious 2023-12-26 12:04:05 -03:00
Mohamed ElKalioby
be3cf69956 Merge branch 'master' of https://github.com/mkalioby/django-mfa2 2022-12-19 14:55:48 +03:00
Mohamed ElKalioby
98b9fce1d2 Support for Django4.0+ JSONField 2022-12-19 14:55:37 +03:00
Mohamed ElKalioby
17ef0f4b1e #70 closed 2022-12-19 14:23:32 +03:00
Mohamed El-Kalioby
669fef84fd Link to django-passkeys 2022-11-05 10:13:55 +03:00
Mohamed El-Kalioby
25be381ca9 Merge remote-tracking branch 'origin/v2.6.1' 2022-10-16 16:18:45 +03:00
Mohamed El-Kalioby
bdb4de3375 Update README.md 2022-10-14 19:46:49 +02:00
Mohamed ElKalioby
ab89a204bb Added Works with PassKeys Logo 2022-10-14 15:17:07 +03:00
Mohamed ElKalioby
caaa059d5b Add PassKey image 2022-10-14 15:15:24 +03:00
24 changed files with 588 additions and 547 deletions

View File

@@ -1,4 +1,12 @@
# Change Log # Change Log
## 2.8.0
* Support For Django 4.0+ JSONField
* Removed jsonfield package from requirements
## 2.7.0
* Fixed #70
* Add QR Code for trusted device link
* Better formatting for trusted device start page.
## 2.6.1 ## 2.6.1
* Fix: CVE-2022-42731: related to the possibility of registration replay attack. * Fix: CVE-2022-42731: related to the possibility of registration replay attack.
Thanks to 'SSE (Secure Systems Engineering)' Thanks to 'SSE (Secure Systems Engineering)'

View File

@@ -1,6 +1,7 @@
# django-mfa2 # django-mfa2
A Django app that handles MFA, it supports TOTP, U2F, FIDO2 U2F (Web Authn), Email Tokens , Trusted Devices and backup codes. A Django app that handles MFA, it supports TOTP, U2F, FIDO2 U2F (Web Authn), Email Tokens , Trusted Devices and backup codes.
[![Works with PassKeys](https://github.com/mkalioby/django-mfa2/raw/master/img/Works%20with%20PassKeys-black.png)](https://fidoalliance.org/passkeys/)
### Pip Stats ### Pip Stats
[![PyPI version](https://badge.fury.io/py/django-mfa2.svg)](https://badge.fury.io/py/django-mfa2) [![PyPI version](https://badge.fury.io/py/django-mfa2.svg)](https://badge.fury.io/py/django-mfa2)
[![Downloads Count](https://static.pepy.tech/personalized-badge/django-mfa2?period=total&units=international_system&left_color=black&right_color=green&left_text=Downloads)](https://pepy.tech/project/django-mfa2) [![Downloads Count](https://static.pepy.tech/personalized-badge/django-mfa2?period=total&units=international_system&left_color=black&right_color=green&left_text=Downloads)](https://pepy.tech/project/django-mfa2)
@@ -16,12 +17,14 @@ Web Authencation API (WebAuthn) is state-of-the art techology that is expected t
For FIDO2, the following are supported For FIDO2, the following are supported
* **security keys** (Firefox 60+, Chrome 67+, Edge 18+, Safari 13 on Mac OS, Chrome on Andriod, Safari on iOS 13.3+), * **security keys** (Firefox 60+, Chrome 67+, Edge 18+, Safari 13 on Mac OS, Chrome on Andriod, Safari on iOS 13.3+),
* **Windows Hello** (Firefox 67+, Chrome 72+ , Edge) , * **Windows Hello** (Firefox 67+, Chrome 72+ , Edge),
* **Apple's Touch ID/Face ID** (Chrome 70+ on Mac OS X, Safari on macOS Big Sur, Safari on iOS 14.0+ ), * **Apple's Touch ID/Face ID** (Chrome 70+ on Mac OS X, Safari on macOS Big Sur, Safari on iOS 14.0+ ),
* **android-safetynet** (Chrome 70+, Firefox 68+) * **android-safetynet** (Chrome 70+, Firefox 68+)
* **NFC devices using PCSC** (Not Tested, but as supported in fido2) * **NFC devices using PCSC** (Not Tested, but as supported in fido2)
* **Soft Tokens** * **Soft Tokens**
* [krypt.co](https://krypt.co/): Login by a notification on your phone. * ~~[krypt.co](https://krypt.co/): Login by a notification on your phone.~~
**Update**: Dec 2022, krypt.co has been killed by Google for Passkeys.
In English :), It allows you to verify the user by security keys on PC, Laptops or Mobiles, Windows Hello (Fingerprint, PIN) on Windows 10 Build 1903+ (May 2019 Update) Touch/Face ID on Macbooks (Chrome, Safari), Touch/Face ID on iPhone and iPad and Fingerprint/Face/Iris/PIN on Android Phones. In English :), It allows you to verify the user by security keys on PC, Laptops or Mobiles, Windows Hello (Fingerprint, PIN) on Windows 10 Build 1903+ (May 2019 Update) Touch/Face ID on Macbooks (Chrome, Safari), Touch/Face ID on iPhone and iPad and Fingerprint/Face/Iris/PIN on Android Phones.
@@ -31,6 +34,8 @@ Trusted device is a mode for the user to add a device that doesn't support secur
Package tested with Django 1.8, Django 2.2 on Python 2.7 and Python 3.5+ but it was not checked with any version in between but open for issues. Package tested with Django 1.8, Django 2.2 on Python 2.7 and Python 3.5+ but it was not checked with any version in between but open for issues.
If you just need WebAuthn and Passkeys, you can use **[django-passkeys](https://github.com/mkalioby/django-passkeys)**, which is a slim-down of this app and much easier to integrate.
Depends on Depends on
* pyotp * pyotp
@@ -42,8 +47,12 @@ Depends on
# Installation # Installation
1. using pip 1. using pip
* For Django >= 4.0
`pip install django-mfa2` `pip install django-mfa2`
* For Django < 4.0
`pip install django-mfa2 jsonfield`
2. Using Conda forge 2. Using Conda forge
`conda config --add channels conda-forge` `conda config --add channels conda-forge`

View File

@@ -16,12 +16,13 @@ Including another URLconf
from django.contrib import admin from django.contrib import admin
from django.urls import path,re_path,include from django.urls import path,re_path,include
from . import views,auth from . import views,auth
from mfa import TrustedDevice
urlpatterns = [ urlpatterns = [
path('admin/', admin.site.urls), path('admin/', admin.site.urls),
path('mfa/', include('mfa.urls')), path('mfa/', include('mfa.urls')),
path('auth/login',auth.loginView,name="login"), path('auth/login',auth.loginView,name="login"),
path('auth/logout',auth.logoutView,name="logout"), path('auth/logout',auth.logoutView,name="logout"),
path('devices/add/', TrustedDevice.add,name="add_trusted_device"),
re_path('^$',views.home,name='home'), re_path('^$',views.home,name='home'),
path('registered/',views.registered,name='registered') path('registered/',views.registered,name='registered')
] ]

Binary file not shown.

After

Width:  |  Height:  |  Size: 2.3 KiB

View File

@@ -7,10 +7,11 @@ from django.template.context_processors import csrf
from .models import * from .models import *
import user_agents import user_agents
from django.utils import timezone from django.utils import timezone
from django.urls import reverse
def id_generator(size=6, chars=string.ascii_uppercase + string.digits): def id_generator(size=6, chars=string.ascii_uppercase + string.digits):
x=''.join(random.choice(chars) for _ in range(size)) x=''.join(random.choice(chars) for _ in range(size))
if not User_Keys.objects.filter(properties__shas="$.key="+x).exists(): return x if not User_Keys.objects.filter(properties__icontains='"key": "%s"'%x).exists(): return x
else: return id_generator(size,chars) else: return id_generator(size,chars)
def getUserAgent(request): def getUserAgent(request):
@@ -57,12 +58,13 @@ def getCookie(request):
def add(request): def add(request):
context=csrf(request) context=csrf(request)
if request.method=="GET": if request.method=="GET":
context.update({"username":request.GET.get('u',''),"key":request.GET.get('k','')})
return render(request,"TrustedDevices/Add.html",context) return render(request,"TrustedDevices/Add.html",context)
else: else:
key=request.POST["key"].replace("-","").replace(" ","").upper() key=request.POST["key"].replace("-","").replace(" ","").upper()
context["username"] = request.POST["username"] context["username"] = request.POST["username"]
context["key"] = request.POST["key"] context["key"] = request.POST["key"]
trusted_keys=User_Keys.objects.filter(username=request.POST["username"],properties__has="$.key="+key) trusted_keys=User_Keys.objects.filter(username=request.POST["username"],properties__icontains='"key": "%s"'%key)
cookie=False cookie=False
if trusted_keys.exists(): if trusted_keys.exists():
tk=trusted_keys[0] tk=trusted_keys[0]
@@ -97,7 +99,7 @@ def start(request):
request.session["td_id"]=td.id request.session["td_id"]=td.id
try: try:
if td==None: td=User_Keys.objects.get(id=request.session["td_id"]) if td==None: td=User_Keys.objects.get(id=request.session["td_id"])
context={"key":td.properties["key"]} context={"key":td.properties["key"],"url":request.scheme+"://"+request.get_host() + reverse('add_trusted_device')}
except: except:
del request.session["td_id"] del request.session["td_id"]
return start(request) return start(request)
@@ -124,12 +126,14 @@ def verify(request):
json= jwt.decode(request.COOKIES.get('deviceid'),settings.SECRET_KEY) json= jwt.decode(request.COOKIES.get('deviceid'),settings.SECRET_KEY)
if json["username"].lower()== request.session['base_username'].lower(): if json["username"].lower()== request.session['base_username'].lower():
try: try:
uk = User_Keys.objects.get(username=request.POST["username"].lower(), properties__has="$.key=" + json["key"]) uk = User_Keys.objects.get(username=request.POST["username"].lower(), properties__icontains='"key": "%s"'%json["key"])
if uk.enabled and uk.properties["status"] == "trusted": if uk.enabled and uk.properties["status"] == "trusted":
uk.last_used=timezone.now() uk.last_used=timezone.now()
uk.save() uk.save()
request.session["mfa"] = {"verified": True, "method": "Trusted Device","id":uk.id} request.session["mfa"] = {"verified": True, "method": "Trusted Device","id":uk.id}
return True return True
except: except:
import traceback
print(traceback.format_exc())
return False return False
return False return False

View File

@@ -4,8 +4,14 @@ from . import TrustedDevice, U2F, FIDO2, totp
import simplejson import simplejson
from django.shortcuts import HttpResponse from django.shortcuts import HttpResponse
from mfa.views import verify,goto from mfa.views import verify,goto
from mfa.recovery import delTokens
def has_mfa(request,username): def has_mfa(request,username):
if User_Keys.objects.filter(username=username,enabled=1).count()>0: uk = User_Keys.objects.filter(username=username,enabled=1)
if uk.count()==1:
for u in uk:
if u.key_type == "RECOVERY":
delTokens(request)
elif uk.count()>0:
return verify(request, username) return verify(request, username)
return False return False

View File

@@ -2,7 +2,14 @@
from __future__ import unicode_literals from __future__ import unicode_literals
from django.db import models, migrations from django.db import models, migrations
import jsonfield.fields try:
from django.db.models import JSONField
except ImportError:
try:
from jsonfield.fields import JSONField
except ImportError:
raise ImportError("Can't find a JSONField implementation, please install jsonfield if django < 4.0")
def modify_json(apps, schema_editor): def modify_json(apps, schema_editor):
@@ -24,7 +31,7 @@ class Migration(migrations.Migration):
migrations.AddField( migrations.AddField(
model_name='user_keys', model_name='user_keys',
name='properties', name='properties',
field=jsonfield.fields.JSONField(null=True), field=JSONField(null=True),
), ),
migrations.RunPython(modify_json) migrations.RunPython(modify_json)
] ]

View File

@@ -1,5 +1,12 @@
from django.db import models from django.db import models
from jsonfield import JSONField try:
from django.db.models import JSONField
except ModuleNotFoundError:
try:
from jsonfield import JSONField
except ModuleNotFoundError:
raise ModuleNotFoundError("Can't find a JSONField implementation, please install jsonfield if django < 4.0")
from jose import jwt from jose import jwt
from django.conf import settings from django.conf import settings
#from jsonLookup import shasLookup, hasLookup #from jsonLookup import shasLookup, hasLookup

View File

@@ -0,0 +1 @@
{"version":3,"file":"bootstrap-toggle.min.js","sources":["bootstrap-toggle.js"],"names":["$","Plugin","option","this","each","$this","data","options","Toggle","element","$element","extend","defaults","render","VERSION","DEFAULTS","on","off","onstyle","offstyle","size","style","width","height","prototype","attr","_onstyle","_offstyle","$toggleOn","html","addClass","$toggleOff","$toggleHandle","$toggleGroup","append","$toggle","prop","wrap","parent","Math","max","outerWidth","outerHeight","css","update","trigger","toggle","silent","removeClass","enable","removeAttr","disable","change","proxy","destroy","remove","removeData","unwrap","old","fn","bootstrapToggle","Constructor","noConflict","document","e","$checkbox","find","preventDefault","jQuery"],"mappings":";;;;;;;CASE,SAAUA,GACV,YAoID,SAASC,GAAOC,GACf,MAAOC,MAAKC,KAAK,WAChB,GAAIC,GAAUL,EAAEG,MACZG,EAAUD,EAAMC,KAAK,aACrBC,EAA2B,gBAAVL,IAAsBA,CAEtCI,IAAMD,EAAMC,KAAK,YAAcA,EAAO,GAAIE,GAAOL,KAAMI,IACvC,gBAAVL,IAAsBI,EAAKJ,IAASI,EAAKJ,OAtItD,GAAIM,GAAS,SAAUC,EAASF,GAC/BJ,KAAKO,SAAYV,EAAES,GACnBN,KAAKI,QAAYP,EAAEW,UAAWR,KAAKS,WAAYL,GAC/CJ,KAAKU,SAGNL,GAAOM,QAAW,QAElBN,EAAOO,UACNC,GAAI,KACJC,IAAK,MACLC,QAAS,UACTC,SAAU,UACVC,KAAM,SACNC,MAAO,GACPC,MAAO,KACPC,OAAQ,MAGTf,EAAOgB,UAAUZ,SAAW,WAC3B,OACCI,GAAIb,KAAKO,SAASe,KAAK,YAAcjB,EAAOO,SAASC,GACrDC,IAAKd,KAAKO,SAASe,KAAK,aAAejB,EAAOO,SAASE,IACvDC,QAASf,KAAKO,SAASe,KAAK,iBAAmBjB,EAAOO,SAASG,QAC/DC,SAAUhB,KAAKO,SAASe,KAAK,kBAAoBjB,EAAOO,SAASI,SACjEC,KAAMjB,KAAKO,SAASe,KAAK,cAAgBjB,EAAOO,SAASK,KACzDC,MAAOlB,KAAKO,SAASe,KAAK,eAAiBjB,EAAOO,SAASM,MAC3DC,MAAOnB,KAAKO,SAASe,KAAK,eAAiBjB,EAAOO,SAASO,MAC3DC,OAAQpB,KAAKO,SAASe,KAAK,gBAAkBjB,EAAOO,SAASQ,SAI/Df,EAAOgB,UAAUX,OAAS,WACzBV,KAAKuB,SAAW,OAASvB,KAAKI,QAAQW,QACtCf,KAAKwB,UAAY,OAASxB,KAAKI,QAAQY,QACvC,IAAIC,GAA6B,UAAtBjB,KAAKI,QAAQa,KAAmB,SAClB,UAAtBjB,KAAKI,QAAQa,KAAmB,SACV,SAAtBjB,KAAKI,QAAQa,KAAkB,SAC/B,GACCQ,EAAY5B,EAAE,uBAAuB6B,KAAK1B,KAAKI,QAAQS,IACzDc,SAAS3B,KAAKuB,SAAW,IAAMN,GAC7BW,EAAa/B,EAAE,uBAAuB6B,KAAK1B,KAAKI,QAAQU,KAC1Da,SAAS3B,KAAKwB,UAAY,IAAMP,EAAO,WACrCY,EAAgBhC,EAAE,gDACpB8B,SAASV,GACPa,EAAejC,EAAE,8BACnBkC,OAAON,EAAWG,EAAYC,GAC5BG,EAAUnC,EAAE,iDACd8B,SAAU3B,KAAKO,SAAS0B,KAAK,WAAajC,KAAKuB,SAAWvB,KAAKwB,UAAU,QACzEG,SAASV,GAAMU,SAAS3B,KAAKI,QAAQc,MAEvClB,MAAKO,SAAS2B,KAAKF,GACnBnC,EAAEW,OAAOR,MACRgC,QAAShC,KAAKO,SAAS4B,SACvBV,UAAWA,EACXG,WAAYA,EACZE,aAAcA,IAEf9B,KAAKgC,QAAQD,OAAOD,EAEpB,IAAIX,GAAQnB,KAAKI,QAAQe,OAASiB,KAAKC,IAAIZ,EAAUa,aAAcV,EAAWU,cAAeT,EAAcS,aAAa,EACpHlB,EAASpB,KAAKI,QAAQgB,QAAUgB,KAAKC,IAAIZ,EAAUc,cAAeX,EAAWW,cACjFd,GAAUE,SAAS,aACnBC,EAAWD,SAAS,cACpB3B,KAAKgC,QAAQQ,KAAMrB,MAAOA,EAAOC,OAAQA,IACrCpB,KAAKI,QAAQgB,SAChBK,EAAUe,IAAI,cAAef,EAAUL,SAAW,MAClDQ,EAAWY,IAAI,cAAeZ,EAAWR,SAAW,OAErDpB,KAAKyC,QAAO,GACZzC,KAAK0C,SAAQ,IAGdrC,EAAOgB,UAAUsB,OAAS,WACrB3C,KAAKO,SAAS0B,KAAK,WAAYjC,KAAKc,MACnCd,KAAKa,MAGXR,EAAOgB,UAAUR,GAAK,SAAU+B,GAC/B,MAAI5C,MAAKO,SAAS0B,KAAK,aAAoB,GAC3CjC,KAAKgC,QAAQa,YAAY7C,KAAKwB,UAAY,QAAQG,SAAS3B,KAAKuB,UAChEvB,KAAKO,SAAS0B,KAAK,WAAW,QACzBW,GAAQ5C,KAAK0C,aAGnBrC,EAAOgB,UAAUP,IAAM,SAAU8B,GAChC,MAAI5C,MAAKO,SAAS0B,KAAK,aAAoB,GAC3CjC,KAAKgC,QAAQa,YAAY7C,KAAKuB,UAAUI,SAAS3B,KAAKwB,UAAY,QAClExB,KAAKO,SAAS0B,KAAK,WAAW,QACzBW,GAAQ5C,KAAK0C,aAGnBrC,EAAOgB,UAAUyB,OAAS,WACzB9C,KAAKgC,QAAQe,WAAW,YACxB/C,KAAKO,SAAS0B,KAAK,YAAY,IAGhC5B,EAAOgB,UAAU2B,QAAU,WAC1BhD,KAAKgC,QAAQV,KAAK,WAAY,YAC9BtB,KAAKO,SAAS0B,KAAK,YAAY,IAGhC5B,EAAOgB,UAAUoB,OAAS,SAAUG,GAC/B5C,KAAKO,SAAS0B,KAAK,YAAajC,KAAKgD,UACpChD,KAAK8C,SACN9C,KAAKO,SAAS0B,KAAK,WAAYjC,KAAKa,GAAG+B,GACtC5C,KAAKc,IAAI8B,IAGfvC,EAAOgB,UAAUqB,QAAU,SAAUE,GACpC5C,KAAKO,SAASO,IAAI,oBACb8B,GAAQ5C,KAAKO,SAAS0C,SAC3BjD,KAAKO,SAASM,GAAG,mBAAoBhB,EAAEqD,MAAM,WAC5ClD,KAAKyC,UACHzC,QAGJK,EAAOgB,UAAU8B,QAAU,WAC1BnD,KAAKO,SAASO,IAAI,oBAClBd,KAAK8B,aAAasB,SAClBpD,KAAKO,SAAS8C,WAAW,aACzBrD,KAAKO,SAAS+C,SAiBf,IAAIC,GAAM1D,EAAE2D,GAAGC,eAEf5D,GAAE2D,GAAGC,gBAA8B3D,EACnCD,EAAE2D,GAAGC,gBAAgBC,YAAcrD,EAKnCR,EAAE2D,GAAGb,OAAOgB,WAAa,WAExB,MADA9D,GAAE2D,GAAGC,gBAAkBF,EAChBvD,MAMRH,EAAE,WACDA,EAAE,6CAA6C4D,oBAGhD5D,EAAE+D,UAAU/C,GAAG,kBAAmB,2BAA4B,SAASgD,GACtE,GAAIC,GAAYjE,EAAEG,MAAM+D,KAAK,uBAC7BD,GAAUL,gBAAgB,UAC1BI,EAAEG,oBAGFC"}

File diff suppressed because one or more lines are too long

View File

@@ -61,21 +61,24 @@
{% endblock %} {% endblock %}
{% block content %} {% block content %}
<br/> <div class="col-lg-8 col-md-8 col-12 mx-auto">
<br/> <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<div class="container"> <span class="mask bg-gradient-primary opacity-6"></span>
<div class="panel panel-default card">
<div class="panel-heading card-header">
<strong> Adding a New {{ method.name }}</strong>
</div> </div>
<div class="panel-body card-body"> <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="card-header pb-0 p-3">
<h6 class="mb-0"><strong> Adding a New {{ method.name }}</strong></h6>
</div>
<div class="card-body">
<div class="row alert alert-pr" id="res" align="center"> <div class="row alert alert-pr" id="res" align="center">
<p style="color: green">Your browser should ask you to confirm you identity.</p> <p style="color: green">Your browser should ask you to confirm you identity.</p>
</div> </div>
</div> </div>
</div> </div>
{% include "modal.html" %} {% include "modal.html" %}
{% endblock %} {% endblock %}

View File

@@ -1,14 +1,15 @@
{% load static %} {% load static %}
<script type="application/javascript" src="{% static 'mfa/js/cbor.js' %}"></script> <script type="application/javascript" src="{% static 'mfa/js/cbor.js' %}"></script>
<script type="application/javascript" src="{% static 'mfa/js/ua-parser.min.js' %}"></script> <script type="application/javascript" src="{% static 'mfa/js/ua-parser.min.js' %}"></script>
<div class="row"> <div class="col-lg-8 col-md-8 col-12 mx-auto">
<div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2 offset-2 col-8"> <span class="mask bg-gradient-primary opacity-6"></span>
<div class="panel panel-default card">
<div class="panel-heading card-header">
<strong> Security Key</strong>
</div> </div>
<div class="panel-body card-body"> <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="card-header pb-0 p-3">
<h6 class="mb-0"><strong> Security Key</strong></h6>
</div>
<div class="card-body">
<div class="row"> <div class="row">
<div style="padding-left: 15px" class="col-md-10 col-md-offset-1" id="main_paragraph" align="center"> <div style="padding-left: 15px" class="col-md-10 col-md-offset-1" id="main_paragraph" align="center">
@@ -16,7 +17,6 @@
Welcome back {% comment %}<img src="{% url 'getUserImage' request.session.base_username %}" title="{{ request.session.base_username }}" style="padding: 3px;height: 50px" class="img-circle"/>{% endcomment %} {{ request.session.base_username }}<br/> Welcome back {% comment %}<img src="{% url 'getUserImage' request.session.base_username %}" title="{{ request.session.base_username }}" style="padding: 3px;height: 50px" class="img-circle"/>{% endcomment %} {{ request.session.base_username }}<br/>
<a href="{% url 'mfa_reset_cookie' %}">Not me</a> <a href="{% url 'mfa_reset_cookie' %}">Not me</a>
<br/> <br/>
{% endif %} {% endif %}
<div id="res"> <div id="res">
<p style="color: green">please press the button on your security key to prove it is you.</p> <p style="color: green">please press the button on your security key to prove it is you.</p>
@@ -32,19 +32,13 @@
</form> </form>
</div> </div>
</div> </div>
</div>
<div class="row"> <div class="row">
<div class="col-md-12 mb-3" style="padding-left: 25px">
{% if request.session.mfa_methods|length > 1 %} {% if request.session.mfa_methods|length > 1 %}
<a href="{% url 'mfa_methods_list' %}">Select Another Method</a> <a href="{% url 'mfa_methods_list' %}">Select Another Method</a>
{% endif %} {% endif %}
</div> </div>
</div> </div>
</div> </div>
</div>
</div>
</div> </div>
<script type="text/javascript"> <script type="text/javascript">

View File

@@ -40,12 +40,15 @@
<script src="{% static 'mfa/js/bootstrap-toggle.min.js'%}"></script> <script src="{% static 'mfa/js/bootstrap-toggle.min.js'%}"></script>
{% endblock %} {% endblock %}
{% block content %} {% block content %}
{{block.super}}
<br/>
<br/> <div class="col-lg-10 col-md-10 col-12 mx-auto">
<div class="container"> <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<div class="row"> <span class="mask bg-gradient-primary opacity-6"></span>
<div class="offset-5 col-2" style="text-align: center"> </div>
<div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="card-body">
<div class="" style="text-align: center">
<div class="btn-group"> <div class="btn-group">
<button class="btn btn-success dropdown-toggle" data-toggle="dropdown" data-bs-toggle="dropdown"> <button class="btn btn-success dropdown-toggle" data-toggle="dropdown" data-bs-toggle="dropdown">
Add Method&nbsp;<span class="caret"></span> Add Method&nbsp;<span class="caret"></span>
@@ -70,10 +73,9 @@
</div> </div>
</div> </div>
</div> </div>
<br/> <div class="table-responsive">
<table class="table table-striped"> <table class="table table-responsive table-striped">
<tr> <tr>
<th>Type</th> <th>Type</th>
<th>Date Added</th> <th>Date Added</th>
<th>Expires On</th> <th>Expires On</th>
@@ -85,7 +87,6 @@
{% if keys %} {% if keys %}
{% for key in keys %} {% for key in keys %}
<tr> <tr>
<td>{{ key.name }}</td> <td>{{ key.name }}</td>
<td>{{ key.added_on }}</td> <td>{{ key.added_on }}</td>
<td>{% if key.expires %}{{ key.expires }}{% else %}N/A{% endif %}</td> <td>{% if key.expires %}{{ key.expires }}{% else %}N/A{% endif %}</td>
@@ -121,5 +122,10 @@
</table> </table>
</div> </div>
</div> </div>
{% include "modal.html" %}
</div>
</div>
{% include "modal.html" %}
{% endblock %} {% endblock %}

View File

@@ -1,4 +1,3 @@
{% extends "base.html" %} {% extends "base.html" %}
{% load static %} {% load static %}
{% block head %} {% block head %}
@@ -98,35 +97,25 @@
</script> </script>
{% endblock %} {% endblock %}
{% block content %} {% block content %}
<br/> <div class="col-lg-8 col-md-8 col-12 mx-auto">
<br/> <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<div class="container d-flex justify-content-center"> <span class="mask bg-gradient-primary opacity-6"></span>
<div class="col-md-6 col-md-offset-3" id="two-factor-steps">
<div class="row">
<h4>Recovery Codes List</h4>
</div> </div>
<div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="tokenrow" id="tokens"> <div class="card-header pb-0 p-3">
<h6 class="mb-0">
Recovery Codes List
</h6>
</div>
<div class="card-body">
<div class="tokenrow mb-4" id="tokens">
</div> </div>
<br/>
<br/>
<div class="row"> <div class="row">
<div class="col-md-4 col-md-offset-4" style="padding-left: 0px" align="center"> <div class="col-md-4 col-md-offset-4" style="padding-left: 0px" align="center">
<button onclick="confirmRegenerateTokens()" class="btn btn-success">Regenerate</button> <button onclick="confirmRegenerateTokens()" class="btn btn-success">Regenerate</button>
</div> </div>
<div class="col-md-6" align="right" style="padding-right: 30px"> <div class="col-md-6" align="right" style="padding-right: 30px">
<a href="{{redirect_html}}" class="btn btn-default btn-secondary" role="button"> {{reg_success_msg}}</a> <a href="{{redirect_html}}" class="btn btn-default btn-secondary" role="button"> {{reg_success_msg}}</a>
</div>
</div> </div>
</div> </div>
</div> </div>

View File

@@ -22,17 +22,18 @@
}) })
} }
</script> </script>
<div class="row"> <div class="col-lg-8 col-md-8 col-12 mx-auto">
<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-10 col-lg-offset-1"> <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<div class="panel panel-default card"> <span class="mask bg-gradient-primary opacity-6"></span>
<div class="panel-heading card-header">
<strong> Recovery code</strong>
</div> </div>
<div class="panel-body card-body"> <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="card-header pb-0 p-3">
<FORM METHOD="POST" ACTION="{% url 'recovery_auth' %}" Id="formLogin" onSubmit="" name="FrontPage_Form1"> <h6 class="mb-0">
Recovery code
</h6>
</div>
<div class="card-body">
<form METHOD="POST" ACTION="{% url 'recovery_auth' %}" Id="formLogin" onSubmit="" name="FrontPage_Form1">
{% csrf_token %} {% csrf_token %}
{% if invalid %} {% if invalid %}
<div class="alert alert-danger"> <div class="alert alert-danger">
@@ -46,40 +47,30 @@
{% endif %} {% endif %}
<fieldset> <fieldset>
<div class="row"> <div class="row">
<div class="col-sm-12 col-md-12">
<p>Enter the 11-digits on your authenticator. Or input a recovery code</p> <p>Enter the 11-digits on your authenticator. Or input a recovery code</p>
</div> </div>
</div>
<div class="row"> <div class="row">
<div class="col-sm-12 col-md-12">
<div class="form-group"> <div class="form-group">
<div class="input-group mb-3"> <div class="input-group input-group-static mb-3">
<span class="input-group-addon input-group-text"> <span class="input-group-addon input-group-text">
<i class="glyphicon glyphicon-lock bi bi-lock"></i> <i class="glyphicon glyphicon-lock bi bi-lock"></i>
</span> </span>
<input class="form-control" size="11" MaxLength="11" value="" placeholder="e.g abcde-fghij" name="recovery" type="text" id="recovery" autofocus> <input class="form-control" size="11" MaxLength="11" value="" placeholder="e.g abcde-fghij" name="recovery" type="text" id="recovery" autofocus>
</div>
</div> </div>
<div class="form-group d-grid gap-2"> <div class="form-group d-grid gap-2">
<input type="{% if mode == "auth" %}submit{% elif mode == 'recheck' %}button{% endif %}" {% if mode == "recheck" %}onclick="send_recovery()" {% endif %} class="btn btn-lg btn-success btn-block" value="Sign in"> <input type="{% if mode == "auth" %}submit{% elif mode == 'recheck' %}button{% endif %}" {% if mode == "recheck" %}onclick="send_recovery()" {% endif %} class="btn btn-lg btn-success btn-block" value="Sign in">
</div> </div>
</div> </div>
</fieldset>
</FORM>
</div> </div>
</fieldset>
</form>
<div class="row"> <div class="row">
<div class="col-md-12 mb-3" style="padding-left: 25px">
{% if request.session.mfa_methods|length > 1 %} {% if request.session.mfa_methods|length > 1 %}
<a href="{% url 'mfa_methods_list' %}">Select Another Method</a> <a href="{% url 'mfa_methods_list' %}">Select Another Method</a>
{% endif %} {% endif %}
</div> </div>
</div> </div>
</div>
</div>
</div>
</div> </div>
{% include "modal.html" %} {% include "modal.html" %}

View File

@@ -1,13 +1,8 @@
{% extends "base.html" %} {% extends "base.html" %}
{% load static %} {% load static %}
{% block head %} {% block head %}
<style> <style>
#two-factor-steps {
border: 1px solid #ccc;
border-radius: 3px;
padding: 15px;
}
.row{ .row{
margin: 0px; margin: 0px;
} }
@@ -87,11 +82,19 @@
{% block content %} {% block content %}
<br/> <br/>
<br/> <br/>
<div class="container d-flex justify-content-center"> <div class="container-fluid px-2 px-md-4">
<div class="col-md-6 col-md-offset-3" id="two-factor-steps"> <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<div class="row" align="center"> <span class="mask bg-gradient-primary opacity-6"></span>
<h4>Adding a new {{ method.name }}</h4>
</div> </div>
<div class="card mx-3 mx-md-4 mt-n6 h-100" id="two-factor-steps" >
<div class="card-header pb-0 p-3">
<h6 class="mb-0">Adding a new {{ method.name }}</h6>
</div>
<div class="card-body p-3">
<div class="row"> <div class="row">
<p>Scan the image below with the two-factor authentication app on your <a href="javascript:void(0)" onclick="showTOTP()">phone/PC</a>. If you cant use a barcode, <p>Scan the image below with the two-factor authentication app on your <a href="javascript:void(0)" onclick="showTOTP()">phone/PC</a>. If you cant use a barcode,
@@ -111,23 +114,27 @@
<div class="row"> <div class="row">
<p><b>Enter the six-digit code from the application</b></p> <p><b>Enter the six-digit code from the application</b></p>
<p style="color: #333333;font-size: 10px">After scanning the barcode image, the app will display a six-digit code that you can enter below. </p> <p >After scanning the barcode image, the app will display a six-digit code that you can enter below. </p>
</div> </div>
<div class="row"> <div class="row">
<div class="offset-md-4 col-md-4"> <div class="offset-md-4 col-md-4">
<div class="input-group input-group-static">
<input style="display: inline;width: 95%" maxlength="6" size="6" class="form-control" id="answer" placeholder="e.g 785481"/> <input style="display: inline;width: 95%" maxlength="6" size="6" class="form-control" id="answer" placeholder="e.g 785481"/>
</div> </div>
</div> </div>
</div>
<div class="row" style="padding-top: 10px;"> <div class="row" style="padding-top: 10px;">
<div class="col-md-4 offset-md-4" style="padding-left: 0px"> <div class="offset-md-4 col-md-4">
<button class="btn btn-success" onclick="verify()">Enable</button> <button class="btn btn-success" onclick="verify()">Enable</button>
<a href="{% url 'mfa_home' %}" class="btn btn-default btn-secondary" role="button">Cancel</a> <a href="{% url 'mfa_home' %}" class="btn btn-default btn-secondary" role="button">Cancel</a>
</div> </div>
</div> </div>
</div> </div>
</div> </div>
</div>
</div> </div>
{% include "modal.html" %} {% include "modal.html" %}
{% endblock %} {% endblock %}

View File

@@ -1,10 +1,10 @@
{% extends "mfa_auth_base.html" %} {% extends "mfa_auth_base.html" %}
{% block head %} {% block head %}
<style> <!--<style>
.row{ .row{
margin-left: 15px; margin-left: 15px;
} }
</style> </style>-->
{% endblock %} {% endblock %}
{% block content %} {% block content %}
<br/> <br/>

View File

@@ -1,30 +1,19 @@
<script type="application/javascript"> {% extends "mfa_auth_base.html" %}
function send_totp() { {% load static %}
$.ajax({"url":"{% url 'totp_recheck' %}", method:"POST",dataType:"JSON",
data:{"csrfmiddlewaretoken":"{{ csrf_token }}","otp":$("#otp").val()},
success:function (data) {
if (data["recheck"])
mfa_success_function();
else {
mfa_failed_function();
}
}
})
}
</script>
<div class='container'>
<div class="row">
<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2"> {% block content %}
<div class="panel panel-default card">
<div class="panel-heading card-header">
<strong> One Time Password</strong> <div class="col-lg-8 col-md-8 col-12 mx-auto">
<div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<span class="mask bg-gradient-primary opacity-6"></span>
</div> </div>
<div class="panel-body card-body"> <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="card-header pb-0 p-3 ">
<FORM METHOD="POST" ACTION="{% url 'totp_auth' %}" Id="formLogin" onSubmit="" name="FrontPage_Form1"> <h6 class="mb-0">One Time Password</h6>
</div>
<div class="card-body">
<form METHOD="POST" ACTION="{% url 'totp_auth' %}" Id="formLogin" onSubmit="" name="FrontPage_Form1">
{% csrf_token %} {% csrf_token %}
{% if invalid %} {% if invalid %}
<div class="alert alert-danger"> <div class="alert alert-danger">
@@ -37,41 +26,39 @@
</div> </div>
{% endif %} {% endif %}
<fieldset> <fieldset>
<div class="row">
<div class="col-sm-12 col-md-12"> <div class=" text-left">
<p>Enter the 6-digits on your authenticator</p> <p>Enter the 6-digits on your authenticator</p>
</div> </div>
</div>
<div class="row">
<div class="col-sm-12 col-md-12">
<div class="form-group"> <div class="form-group">
<div class="input-group mb-3"> <div class="input-group input-group-dynamic mb-3">
<span class="input-group-addon input-group-text"> <span class="input-group-addon input-group-text">
<i class="glyphicon glyphicon-lock bi bi-lock"></i> <i class="glyphicon glyphicon-lock bi bi-lock"></i>
</span> </span>
<input class="form-control" size="6" MaxLength="6" value="" placeholder="e.g 55552" name="otp" type="text" id="otp" autofocus> <input class="form-control" size="6" MaxLength="6" value="" placeholder="e.g 55552" name="otp" type="text" id="otp" autofocus>
</div> </div>
</div> </div>
<div class="form-group d-grid gap-2"> <div class="form-group d-grid gap-2">
<input type="{% if mode == "auth" %}submit{% elif mode == 'recheck' %}button{% endif %}" {% if mode == "recheck" %}onclick="send_totp()" {% endif %} class="btn btn-lg btn-success btn-block" value="Sign in">
</div>
<input type="{% if mode == "auth" %}submit{% elif mode == 'recheck' %}button{% endif %}" {% if mode == "recheck" %}onclick="send_totp()" {% endif %} class="btn btn-lg btn-success btn-block" value="Sign in"> </div>
</div>
</fieldset> </fieldset>
</FORM> </form>
</div>
<div class="row">
<div class="col-md-12 mb-3" style="padding-left: 25px"> <div class="">
{% if request.session.mfa_methods|length > 1 %} {% if request.session.mfa_methods|length > 1 %}
<a href="{% url 'mfa_methods_list' %}">Select Another Method</a> <a href="{% url 'mfa_methods_list' %}">Select Another Method</a>
{% endif %} {% endif %}
</div> </div>
</div>
</div>
</div>
</div> </div>
</div> </div>
</div> </div>
{% include "modal.html" %} {% include "modal.html" %}
{% endblock %}

View File

@@ -25,17 +25,17 @@
</script> </script>
{% endblock %} {% endblock %}
{% block content %} {% block content %}
<br/> <div class="col-lg-8 col-md-8 col-12 mx-auto">
<br/> <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<span class="mask bg-gradient-primary opacity-6"></span>
<div class="row">
<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2">
<div class="panel panel-default card">
<div class="panel-heading card-header">
<strong> Add Trusted Device</strong>
</div> </div>
<div class="panel-body card-body"> <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="card-header pb-0 p-3">
<h6 class="mb-0">
<strong> Add Trusted Device</strong>
</h6>
</div>
<div class="card-body">
{% if success %} {% if success %}
<div class="alert alert-warning"> <div class="alert alert-warning">
Please check your PC window, to continue the process. Please check your PC window, to continue the process.
@@ -46,8 +46,8 @@
</div> </div>
{% else %} {% else %}
<div class="alert alert-warning">Please make sure you are not in private (incognito) mode <i class="fal fa-user-secret"></i></div> <div class="alert alert-warning text-white">Please make sure you are not in private (incognito) mode <i class="fa fa-user-secret"></i></div>
<FORM METHOD="POST" ACTION="{% url 'add_td' %}" Id="formLogin" onSubmit="return checkFlag()" name="FrontPage_Form1"> <form METHOD="POST" ACTION="{% url 'add_td' %}" Id="formLogin" onSubmit="return checkFlag()" name="FrontPage_Form1">
{% csrf_token %} {% csrf_token %}
{% if invalid %} {% if invalid %}
<div class="alert alert-danger"> <div class="alert alert-danger">
@@ -60,23 +60,19 @@
</div> </div>
{% endif %} {% endif %}
<fieldset> <fieldset>
<div class="row"> <div class="row">
<div class="col-sm-12 col-md-12"> <div>
</div>
</div>
<div class="row">
<div class="col-sm-12 col-md-12">
<div class="form-group"> <div class="form-group">
<div class="input-group mb-3"> <div class="input-group input-group-static mb-3">
<span class="input-group-addon input-group-text"> <span class="input-group-addon input-group-text">
<i class="glyphicon glyphicon-user bi bi-person"></i> <i class="glyphicon glyphicon-user bi bi-person"></i>
</span> </span>
<input class="form-control" id="username" size="30" MaxLength="30" placeholder="Username" name="username" value="{{ username }}" type="text" autofocus autocomplete="on"> <input class="form-control" id="username" size="30" MaxLength="30" placeholder="Username" name="username" value="{{ username }}" type="text" autofocus autocomplete="on">
</div> </div>
</div> </div>
<div class="form-group"> <div class="form-group">
<div class="input-group mb-3"> <div class="input-group input-group-static mb-3">
<span class="input-group-addon input-group-text"> <span class="input-group-addon input-group-text">
<i class="fa fa-key"></i> <i class="fa fa-key"></i>
</span> </span>
@@ -84,27 +80,25 @@
</div> </div>
</div> </div>
<div class="form-group"> <div class="form-group">
<span class="input-group mb-3"> <span class=" form-check ">
<input id='agree' name="agree" type="checkbox"><span style="color: red"> I confirm that this device is mine and it is only used by me.</span> <input class="form-check-input" id='agree' name="agree" type="checkbox">
<span style="color: red"> I confirm that this device is mine and it is only used by me.
</span>
</div> </div>
{% comment %} {% comment %}
<div class="form-group"> <div class="form-group">
<div class="input-group mb-3"> <div class="input-group mb-3">
<span class="input-group-addon input-group-text"> <span class="input-group-addon input-group-text">
<select size="1" name="Institution_Code" style="font-size: 10pt; font-family: Calibri; height: 34px;width: 230px"> <select size="1" name="Institution_Code" style="font-size: 10pt; font-family: Calibri; height: 34px;width: 230px">
{% for ins in institutes %} {% for ins in institutes %}
<option value="{{ ins.institution_code }}">{{ ins.alias }}</option> <option value="{{ ins.institution_code }}">{{ ins.alias }}</option>
{% endfor %} {% endfor %}
</select> </select>
</span> </span>
</div> </div>
</div> </div>
{% endcomment %} {% endcomment %}
<div class="form-group d-grid gap-2"> <div class="form-group d-grid gap-2 mt-2">
<input type="submit" class="btn btn-lg btn-success btn-block" value="Trust Device"> <input type="submit" class="btn btn-lg btn-success btn-block" value="Trust Device">
</div> </div>
</div> </div>
@@ -113,13 +107,6 @@
</form> </form>
{% endif %} {% endif %}
</div> </div>
<div class="panel-footer card-footer"> </div>
{% include "modal.html" %}
{% endblock %}
</div>
</div>
</div>
</div>
{% endblock %}

View File

@@ -1,5 +1,7 @@
{% extends "base.html" %} {% extends "base.html" %}
{% load static %}
{% block head %} {% block head %}
<script src="{% static 'mfa/js/qrious.min.js' %}" type="text/javascript"></script>
<style> <style>
#two-factor-steps { #two-factor-steps {
border: 1px solid #ccc; border: 1px solid #ccc;
@@ -12,6 +14,12 @@
</style> </style>
<script type="text/javascript"> <script type="text/javascript">
$(document).ready(function (){
var qr = new QRious({
element: document.getElementById('qr'),
value: "{{ url }}?u={{ request.user.username }}&k={{ key }}"
});
})
function sendEmail() { function sendEmail() {
$("#modal-title").html("Send Link") $("#modal-title").html("Send Link")
$("#modal-body").html("Sending Email, Please wait...."); $("#modal-body").html("Sending Email, Please wait....");
@@ -70,33 +78,58 @@
</script> </script>
{% endblock %} {% endblock %}
{% block content %} {% block content %}
<br/> <div class="col-lg-8 col-md-8 col-12 mx-auto">
<br/> <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<div class="container"> <span class="mask bg-gradient-primary opacity-6"></span>
<div class="col-md-6 col-md-offset-3" id="two-factor-steps">
<div class="row" align="center">
<h4>Add Trusted Device</h4>
</div> </div>
<div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="row" > <div class="card-header pb-0 p-3">
<h6 class="mb-0">
Add Trusted Device
</h6>
</div>
<div class="card-body">
{% if not_allowed %} {% if not_allowed %}
<div class="alert alert-danger">You can't add any more devices, you need to remove previously trusted devices first.</div> <div class="alert alert-danger">You can't add any more devices, you need to remove previously trusted devices first.</div>
{% else %} {% else %}
<p style="color: green">Allow access from mobile phone and tables.</p> <p style="color: green">Allow access from mobile phone and tables.</p><br/>
<br/>
<div class="row">
<h5>Steps:</h5> <h5>Steps:</h5>
</div>
<div class="row">
<div class="col-md-6">
<h5>Using Camera</h5>
<ol> <ol>
<li>Using your mobile/table, open Chrome/Firefox.</li> <li>Using your mobile/table, open Chrome/Firefox.</li>
<li>Go to <b>{{ HOST }}{{ BASE_URL }}devices/add</b>&nbsp;&nbsp;<a href="javascript:void(0)" onclick="sendEmail()" title="Send to my email"><i class="fas fa-paper-plane"></i></a></li> <li>Scan the following barcode <br/>
<img id="qr"/> <br/>
</li>
<li>Confirm the consent and submit form.</li>
</ol>
</div>
<div class="col-md-6">
<h5>Manual</h5>
<ol>
<li>Using your mobile/table, open Chrome/Firefox.</li>
<li>Go to <b>{{ url }}</b>&nbsp;&nbsp;</li>
<li>Enter your username & following 6 digits<br/> <li>Enter your username & following 6 digits<br/>
<span style="font-size: 16px;font-weight: bold; margin-left: 50px">{{ key|slice:":3" }} - {{ key|slice:"3:" }}</span> <span style="font-size: 16px;font-weight: bold; margin-left: 50px">{{ key|slice:":3" }} - {{ key|slice:"3:" }}</span>
</li> </li>
<li>This window will ask to confirm the device.</li> <li>Confirm the consent and submit form.</li>
</div>
</div>
<div class="row">
This window will ask to confirm the device.
</div>
</ol>
{% endif %} {% endif %}
</div> </div>
</div>
</div> </div>
</div> </div>
{% include "modal.html" %} {% include "modal.html" %}
{% include 'mfa_check.html' %} {% include 'mfa_check.html' %}
{% endblock %} {% endblock %}

View File

@@ -1,16 +1,7 @@
{% extends "base.html" %} {% extends "base.html" %}
{% load static %} {% load static %}
{% block head %} {% block head %}
<style>
#two-factor-steps {
border: 1px solid #ccc;
border-radius: 3px;
padding: 15px;
}
.row{
margin: 0px;
}
</style>
<script src="{% static 'mfa/js/u2f-api.js' %}" type="text/javascript"></script> <script src="{% static 'mfa/js/u2f-api.js' %}" type="text/javascript"></script>
<script type="text/javascript"> <script type="text/javascript">
function addToken() { function addToken() {
@@ -43,20 +34,29 @@
</script> </script>
{% endblock %} {% endblock %}
{% block content %} {% block content %}
<div class="col-lg-8 col-md-8 col-12 mx-auto">
<div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<span class="mask bg-gradient-primary opacity-6"></span>
</div>
<div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="card-body">
<br/> <br/>
<br/> <br/>
<div class="container"> <div class="container">
<div class="col-md-6 col-md-offset-3" id="two-factor-steps"> <div id="two-factor-steps">
<div id="res"></div> <div id="res"></div>
<div class="row" align="center"> <div class="row" align="center">
<h4>Adding {{ method.name}}</h4> <h4>Adding {{ method.name}}</h4>
</div> </div>
<div class="row"> <div class="row" align="center">
<p style="color: green">Your secure Key should be flashing now, please press on button.</p> <p style="color: green">Your secure Key should be flashing now, please press on button.</p>
</div>
</div> </div>
</div> </div>
</div> </div>
</div>
{% include "modal.html" %} {% include "modal.html" %}
{% endblock %} {% endblock %}

View File

@@ -1,15 +1,16 @@
{% load static %} {% load static %}
<div class="row"> < <div class="col-lg-8 col-md-8 col-12 mx-auto">
<div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2"> <span class="mask bg-gradient-primary opacity-6"></span>
<div class="panel panel-default card">
<div class="panel-heading card-header">
<strong> Verify your identity using {{ method.name }}</strong>
</div> </div>
<div class="panel-body card-body"> <div class="card mx-3 mx-md-4 mt-n6 h-100 z-index-0 fadeIn3 fadeInBottom " >
<div class="card-header pb-0 p-3">
<h6 class="mb-0">Verify your identity using {{ method.name }}</h6>
</div>
<div class="card-body">
<div class="row"> <div class="row">
<div style="padding-left: 15px" class="col-md-10 col-md-offset-1" id="main_paragraph" align="center"> <div id="main_paragraph" align="center">
<p style="color: green">Your key should be flashing now, please press the button.</p> <p style="color: green">Your key should be flashing now, please press the button.</p>
{% if mode == "auth" %} {% if mode == "auth" %}
<form id="u2f_login" action="{% url 'u2f_verify' %}" method="post"> <form id="u2f_login" action="{% url 'u2f_verify' %}" method="post">
@@ -21,19 +22,18 @@
</form> </form>
</div> </div>
</div> </div>
</div>
<div class="row"> <div class="row">
<div class="col-md-12 mb-3" style="padding-left: 15px">
{% if request.session.mfa_methods|length > 1 %} {% if request.session.mfa_methods|length > 1 %}
<a href="{% url 'mfa_methods_list' %}">Select Another Method</a> <a href="{% url 'mfa_methods_list' %}">Select Another Method</a>
{% endif %} {% endif %}
</div> </div>
</div> </div>
</div>
</div>
</div>
</div> </div>
<script src="{% static 'mfa/js/u2f-api.js' %}" type="text/javascript"></script> <script src="{% static 'mfa/js/u2f-api.js' %}" type="text/javascript"></script>

View File

@@ -1,19 +1,20 @@
{% extends "mfa_auth_base.html" %} {% extends "mfa_auth_base.html" %}
{% block content %} {% block content %}
<br/>
<div class='container'>
<div class="row">
<div class="col-sm-10 col-sm-offset-1 col-xs-12 col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2 offset-2 col-8"> <div class="container-fluid px-2 px-md-4 mt-6">
<div class="panel panel-default card"> <div class="page-header min-height-300 border-radius-xl mt-4" style="background-repeat: no-repeat; background-position: cover; background-size:contain; background-image: url('{% static 'img/keys.jpg'%}');">
<div class="panel-heading card-header"> <span class="mask bg-gradient-primary opacity-6"></span>
<strong> Select Second Verification Method</strong>
</div> </div>
<div class="card mx-3 mx-md-4 mt-n6 h-100" >
<div class="card-header pb-0 p-3">
<h6 class="mb-0">Select Second Verification Method</h6>
</div>
<div class="card-body p-3">
<div class="panel-body card-body"> <div class="panel-body card-body">
<ul> <ul>
{% for method in request.session.mfa_methods %} {% for method in request.session.mfa_methods %}
<li><a href="{% url "mfa_goto" method %}"> <li style="list-style-type: none;"><a class="btn btn-sm btn-outline-primary" href="{% url 'mfa_goto' method %}" >
{% if method == "TOTP" %}{% if 'TOTP' in RENAME_METHODS %}{{ RENAME_METHODS.TOTP }}{% else %}Authenticator App{% endif %} {% if method == "TOTP" %}{% if 'TOTP' in RENAME_METHODS %}{{ RENAME_METHODS.TOTP }}{% else %}Authenticator App{% endif %}
{% elif method == "Email" %}{% if 'Email' in RENAME_METHODS %}{{ RENAME_METHODS.Email }}{% else %}Send OTP by Email{% endif %} {% elif method == "Email" %}{% if 'Email' in RENAME_METHODS %}{{ RENAME_METHODS.Email }}{% else %}Send OTP by Email{% endif %}
{% elif method == "U2F" %}{% if 'U2F' in RENAME_METHODS %}{{ RENAME_METHODS.U2F }}{% else %}Secure Key{% endif %} {% elif method == "U2F" %}{% if 'U2F' in RENAME_METHODS %}{{ RENAME_METHODS.U2F }}{% else %}Secure Key{% endif %}
@@ -24,9 +25,7 @@
{% endfor %} {% endfor %}
</ul> </ul>
</div> </div>
</div> </div>
</div> </div>
</div>
</div> </div>
{% endblock %} {% endblock %}

View File

@@ -4,7 +4,7 @@ from setuptools import find_packages, setup
setup( setup(
name='django-mfa2', name='django-mfa2',
version='2.6.1', version='2.8.0',
description='Allows user to add 2FA to their accounts', description='Allows user to add 2FA to their accounts',
long_description=open("README.md").read(), long_description=open("README.md").read(),
long_description_content_type="text/markdown", long_description_content_type="text/markdown",
@@ -17,7 +17,6 @@ setup(
packages=find_packages(), packages=find_packages(),
install_requires=[ install_requires=[
'django >= 2.0', 'django >= 2.0',
'jsonfield',
'simplejson', 'simplejson',
'pyotp', 'pyotp',
'python-u2flib-server', 'python-u2flib-server',
@@ -25,13 +24,13 @@ setup(
'user-agents', 'user-agents',
'python-jose', 'python-jose',
'fido2 == 1.0.0', 'fido2 == 1.0.0',
'jsonLookup'
], ],
python_requires=">=3.5", python_requires=">=3.5",
include_package_data=True, include_package_data=True,
zip_safe=False, # because we're including static files zip_safe=False, # because we're including static files
classifiers=[ classifiers=[
"Development Status :: 5 - Production/Stable", "Development Status :: 5 - Production/Stable",
#"Development Status :: 4 - Beta",
"Environment :: Web Environment", "Environment :: Web Environment",
"Framework :: Django", "Framework :: Django",
"Framework :: Django :: 2.0", "Framework :: Django :: 2.0",
@@ -41,6 +40,7 @@ setup(
"Framework :: Django :: 3.1", "Framework :: Django :: 3.1",
"Framework :: Django :: 3.2", "Framework :: Django :: 3.2",
"Framework :: Django :: 4.0", "Framework :: Django :: 4.0",
"Framework :: Django :: 4.1",
"Intended Audience :: Developers", "Intended Audience :: Developers",
"Operating System :: OS Independent", "Operating System :: OS Independent",
"Programming Language :: Python", "Programming Language :: Python",
@@ -51,6 +51,7 @@ setup(
"Programming Language :: Python :: 3.8", "Programming Language :: Python :: 3.8",
"Programming Language :: Python :: 3.9", "Programming Language :: Python :: 3.9",
"Programming Language :: Python :: 3.10", "Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Topic :: Software Development :: Libraries :: Python Modules", "Topic :: Software Development :: Libraries :: Python Modules",
] ]
) )