Commit graph

19 commits

Author SHA1 Message Date
Johannes Rauh
3e96d71445 wip: hookable config form 2026-04-30 10:59:24 +02:00
Johannes Rauh
53b01f2915 wip 2026-04-30 10:59:24 +02:00
Johannes Rauh
0194c75ded Remove permission user/two-factor-authentication
The user should not need to ask for more security.
2026-04-30 10:59:24 +02:00
Johannes Rauh
c164f2d90d Rewrite TwoFactorConfigForm to ipl form 2026-04-30 10:59:24 +02:00
Johannes Rauh
599cc2349a Use more appropriate names 2026-04-30 10:59:24 +02:00
Johannes Rauh
50901edeae Refactor 2FA secret handling
Previously, a new 2FA secret was generated and stored temporarily in the
session. It was only persisted to the database when the user clicked the
"Save Changes" button. This behavior has been removed.

Now, the secret is written directly to the database once it has been
initially verified with a token. To generate a new secret if one
already exists, just remove the old one. There is no longer a separate
setting to toggle whether 2FA is enabled for a user — 2FA is considered
enabled if a secret exists for that user in the database.
2026-04-30 10:59:24 +02:00
Johannes Rauh
00438e54b5 Rename stuff
- 'TotpForm' to 'TotpConfigForm'
- 'Authentication\Totp' to 'IcingaTotp'
- 'Model\Totp' to 'TotpModel'
2026-04-30 10:59:24 +02:00
Jan Schuppik
121fe23c25 Initial implementation
From https://github.com/Icinga/icingaweb2/pull/5397
2026-04-30 10:59:24 +02:00
Eric Lippmann
662de28f85 License source files as GPL-3.0-or-later
Add SPDX license headers and mark source files as GPL-3.0-or-later to
preserve the option to relicense under later GPL versions.
2026-03-26 17:49:26 +01:00
Sukhwinder Dhillon
aad2419545 Remove obsolete config_backend option and not required code
The user preferences backend is now always a `db`.
2022-05-27 14:02:11 +02:00
Sukhwinder Dhillon
8ff1a22df7 Set preferences store type to Db and make it non-configurable 2022-05-27 13:55:48 +02:00
Johannes Meyer
744fe5977f AccountController: Don't try to set a storage if there's none 2021-11-02 13:28:52 +01:00
Eric Lippmann
68acf12407
Remember me (#4112)
Co-authored-by: Sukhwinder Dhillon <sukhwinder.dhillon@icinga.com>
2021-05-21 15:43:06 +02:00
sukhwinder33445
ab97b6fdf0
Enforce database as configuration backend (#4135) 2021-02-18 12:31:21 +01:00
Johannes Meyer
cc65164a67 Adjust global permissions 2021-02-18 11:11:39 +01:00
Johannes Meyer
67cc81e49f AccountController: Prohibit password changes for users with no-user/password-change 2019-12-05 09:13:34 +01:00
Johannes Meyer
fb48731978 Set a proper title for all controller actions
refs #3851
2019-07-15 08:24:44 +02:00
Eric Lippmann
e62d94209f Allow users to change their password if backend is db
refs #10616
2016-07-21 17:38:19 +02:00
Eric Lippmann
e6ec6e05b2 Rename Preferences to My Account
refs #10616
2016-07-21 12:31:10 +02:00