Commit graph

2 commits

Author SHA1 Message Date
Johannes Rauh
b1ced8769a Revoke remember-me cookies on 2FA enrollment
Add `RememberMe::removeAllByUsername()` which deletes all rows from
`icingaweb_rememberme` for a given user. Call it from
`TwoFactorEnrollmentForm::onSuccess()` after a successful enroll so that
pre-enrollment cookies on other devices cannot bypass the newly required
second factor.
2026-05-27 10:47:21 +02:00
Johannes Rauh
1b90b6c14f Add enrollment UI and two-factor tab to account navigation
`TwoFactorController::configAction()` renders `TwoFactorEnrollmentForm`, which
shows a method-selector dropdown (autosubmit), the method-specific fieldset
contributed by `assembleEnrollmentFormElements()`, and either an "Enroll" or
"Unenroll" submit button depending on current enrollment state.

`AccountController`, `MyDevicesController`, and `NavigationController` each gain
a "Two-Factor Auth" tab.
2026-05-27 10:47:21 +02:00