5 Commits

Author	SHA1	Message	Date
Felix Spöttel	dcb93d071c	Add TOTP secret to user_key hash ... thanks @downtownallday * this invalidates all user_keys after TOTP status is changed for user * after changing TOTP state, a login is required * due to the forced login, we can't and don't need to store the code used for setup in `mru_code`	2020-09-12 16:34:06 +02:00
Felix Spöttel	ee01eae55e	Decouple totp from users table by moving to totp_credentials table ... * this allows implementation of other mfa schemes in the future (webauthn) * also makes key management easier and enforces one totp credentials per user on db-level	2020-09-03 19:07:21 +02:00
Felix Spöttel	89b301afc7	Update OpenApi docs, rename /2fa/ => /mfa/	2020-09-03 13:54:28 +02:00
Felix Spöttel	8597646a12	Update API route naming, update setup page ... * Rename /two-factor-auth/ => /2fa/ * Nest totp routes under /2fa/totp/ * Update ids and methods in panel to allow for different setup types	2020-09-02 19:41:06 +02:00
Felix Spöttel	a7a66929aa	add user interface for managing 2fa ... * update user schema with 2fa columns	2020-09-02 16:48:23 +02:00