Class: TwoFactorController

Inherits:
ApplicationController show all
Defined in:
app/controllers/two_factor_controller.rb

Instance Method Summary collapse

Methods inherited from ApplicationController

#dashboard, #keyboard_tools, #upload

Instance Method Details

#confirm_disable_code ⇒ Object 



54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
 
# File 'app/controllers/two_factor_controller.rb', line 54

def confirm_disable_code
  if current_user.two_factor_token.blank?
    flash[:danger] = "I don't know how you got here, but something is badly wrong."
    redirect_to two_factor_status_path && return
  end

  totp = ROTP::TOTP.new(current_user.two_factor_token)
  if totp.verify(params[:code], drift_behind: 15, drift_ahead: 15)
    current_user.update(two_factor_token: nil, enabled_2fa: false, backup_2fa_code: nil)
    AuditLog.user_history(event_type: 'two_factor_disabled', related: current_user)
    flash[:success] = 'Success! 2FA has been disabled on your account.'
    redirect_to two_factor_status_path
  else
    flash[:danger] = "That's not the right code."
    redirect_to two_factor_disable_code_path
  end
end

#confirm_disable_link ⇒ Object 



86
87
88
89
90
 
# File 'app/controllers/two_factor_controller.rb', line 86

def confirm_disable_link
  current_user.update(two_factor_method: nil, enabled_2fa: false)
  flash[:success] = 'Success! 2FA has been disabled on your account.'
  redirect_to two_factor_status_path
end

#confirm_enable_code ⇒ Object 



34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
 
# File 'app/controllers/two_factor_controller.rb', line 34

def confirm_enable_code
  if current_user.two_factor_token.blank?
    flash[:danger] = "Missed a step! There's no 2FA token on your account."
    redirect_to two_factor_status_path && return
  end

  totp = ROTP::TOTP.new(current_user.two_factor_token)
  if totp.verify(params[:code], drift_behind: 15, drift_ahead: 15)
    current_user.update(enabled_2fa: true)
    AuditLog.user_history(event_type: 'two_factor_enabled', related: current_user)
    flash[:success] = 'Success! 2FA has been enabled on your account.'
    redirect_to two_factor_status_path
  else
    flash[:danger] = "That's not the right code."
    redirect_to two_factor_enable_code_path
  end
end

#disable_code ⇒ Object 



52
 
# File 'app/controllers/two_factor_controller.rb', line 52

def disable_code; end

#disable_link ⇒ Object 



78
79
80
81
82
83
84
 
# File 'app/controllers/two_factor_controller.rb', line 78

def disable_link
  target_user = User.find_by login_token: params[:token]
  unless current_user.id == target_user.id && target_user. >= DateTime.now
    flash[:danger] = 'There was something wrong with this link. Please request another link and try again.'
    redirect_to two_factor_status_path
  end
end

#enable_2fa ⇒ Object 



7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
 
# File 'app/controllers/two_factor_controller.rb', line 7

def enable_2fa
  if current_user.sso_profile.present? && !SiteSetting['Enable2FAForSsoUsers']
    flash[:danger] = 'You cannot enable 2FA because you sign in through SSO.'
    redirect_to two_factor_status_path
    return
  end

  case params[:method]
  when 'app'
    @secret = ROTP::Base32.random
    current_user.update(two_factor_token: @secret, two_factor_method: 'app',
                        backup_2fa_code: SecureRandom.alphanumeric(24))
    totp = ROTP::TOTP.new(@secret, issuer: 'codidact.com')
    uri = totp.provisioning_uri("#{current_user.id}@users-2fa.codidact.com")
    qr_svg = RQRCode::QRCode.new(uri).as_svg
    @qr_uri = "data:image/svg+xml;base64,#{Base64.encode64(qr_svg)}"
  when 'email'
    current_user.update(two_factor_method: 'email', enabled_2fa: true)
    redirect_to two_factor_status_path
  else
    flash[:danger] = 'How did you get here?'
    redirect_to two_factor_status_path
  end
end

#enable_code ⇒ Object 



32
 
# File 'app/controllers/two_factor_controller.rb', line 32

def enable_code; end

#send_disable_email ⇒ Object 



72
73
74
75
76
 
# File 'app/controllers/two_factor_controller.rb', line 72

def send_disable_email
  TwoFactorMailer.with(user: current_user, host: request.hostname).disable_email.deliver_now
  flash[:success] = 'Check your inbox for an email to confirm you want to do this.'
  redirect_to two_factor_status_path
end

#show_backup_code ⇒ Object 



92
93
94
95
96
97
98
99
 
# File 'app/controllers/two_factor_controller.rb', line 92

def show_backup_code
  totp = ROTP::TOTP.new(current_user.two_factor_token)
  if totp.verify(params[:code], drift_behind: 15, drift_ahead: 15)
    render json: { status: 'success', code: current_user.backup_2fa_code }
  else
    render json: { status: 'error', message: 'Wrong code - please try again.' }, status: 401
  end
end

#tf_status ⇒ Object 



5
 
# File 'app/controllers/two_factor_controller.rb', line 5

def tf_status; end