Commit graph

25 commits

Author SHA1 Message Date
Timothy Andrew
16c44a5ddd Allow naming U2F devices.
1. Display a list of U2F devices on the `two_factor_auth` page.

2. Allow deleting individual U2F devices.

3. Allow setting a (optional) name for a device (during registration).
2016-08-18 22:12:02 +05:30
Robert Speicher
27e4a95221 Merge branch '17341-firefox-u2f' into 'master'
Allow U2F devices to be used in Firefox

- Adds U2F support for Firefox
- Improve U2F feature detection logic
- Have authentication flow be closer to the spec (single challenge instead of a challenge for each `signRequest`)

- Closes #17341 
- Related to #15337 

See merge request !5177
2016-07-15 20:07:51 +00:00
Timothy Andrew
341d8bc3f7 Add a U2F feature spec for multiple devices owned by the same user.
1. This scenario was previously tested for the registration flow, but
   not authentication.
2016-07-14 08:19:09 +05:30
Timothy Andrew
4b33c4c6d1 Load Javascript U2F library selectively.
1. Only on supported Chrome versions

2. Mainly, this lets us simplify the javascript-based U2F check to
   `window.u2f`, where `window.u2f` can either be loaded from the GitLab
   server (for Chrome) or from the Firefox extension.

3. This is a better way to provide browser detection for U2F.
2016-07-14 08:19:09 +05:30
Connor Shea
3358afa758
Update the help_page_path route to accept paths directly instead of using parameters. 2016-07-11 12:55:25 -06:00
Connor Shea
a87b229b5d
Fix preferences tests. 2016-06-30 10:42:07 -06:00
Timothy Andrew
fbb0612593 Don't allow clicking on "Setup New U2F Device" unless an authenticator app has been set up.
- Also change the help message to indicate that an authenticator app is
  now a prerequisite for U2F.
2016-06-15 08:16:11 +05:30
Timothy Andrew
128549f10b Implement U2F registration.
- Move the `TwoFactorAuthsController`'s `new` action to `show`, since
  the page is not used to create a single "two factor auth" anymore. We
  can have a single 2FA authenticator app, along with any number of U2F
  devices, in any combination, so the page will be accessed after the
  first "two factor auth" is created.
- Add the `u2f` javascript library, which provides an API to the
  browser's U2F implementation.
- Add tests for the JS components
2016-06-06 12:50:31 +05:30
Robert Schilling
a1597d22ae Remove 2FA status on enable page 2016-03-29 12:41:54 +02:00
Phil Hughes
a9d97838a3 Added back 2fa configure later button 2016-03-11 09:51:07 +00:00
Phil Hughes
218f3e702a Moved 2fa into separate view 2016-03-11 09:51:07 +00:00
Robert Speicher
3986f4f083 Make "Two-factor" casing consistent throughout the application 2016-01-31 20:34:51 -05:00
Gabriel Mazetto
31fb2b7702 Grace period support for TFA 2015-12-24 19:01:30 -02:00
Patricio Cano
475bb00bde Improved 2FA warning message about lost codes 2015-08-19 18:13:01 -05:00
Achilleas Pipinellis
bde2173b63 Fix link to 2fa help page. Closes #2055 2015-07-22 17:03:38 +03:00
Robert Speicher
e26eb1e162 Update grids for 2FA details
Also adds a link to the documentation.
2015-06-10 16:31:06 -04:00
Robert Speicher
e73ea12695 Add support for manually entering 2FA details 2015-05-23 15:04:40 -04:00
Robert Speicher
3fb0fedd04 Autofocus the pin field on 2FA enable form 2015-05-09 17:32:49 -04:00
Robert Speicher
8eb577ae98 Improve copy for enabling 2FA 2015-05-09 17:32:09 -04:00
Robert Speicher
c891ef9337 Add page titles for two_factor_auths views 2015-05-09 17:32:08 -04:00
Robert Speicher
bd680999f9 Be consistent with what we call the 2FA feature
"Two-factor" vs. "2-Factor"
2015-05-09 17:31:39 -04:00
Robert Speicher
35b62facac Update copy for recovery codes 2015-05-09 17:31:39 -04:00
Dmitriy Zaporozhets
8ae712ae28 Render 2fa recovery codes instead of downloading it 2015-05-09 17:31:39 -04:00
Dmitriy Zaporozhets
cde474a49f Make 2 factor authentication work 2015-05-09 17:31:10 -04:00
Dmitriy Zaporozhets
ba7e2fd946 Create Two-factor authentication resource for user 2015-05-09 17:31:10 -04:00