`;
h += `
${i18n("delete_account")}`;
diff --git a/src/UI/Settings/UITabSecurity.js b/src/UI/Settings/UITabSecurity.js
new file mode 100644
index 000000000..305692b14
--- /dev/null
+++ b/src/UI/Settings/UITabSecurity.js
@@ -0,0 +1,85 @@
+import UIWindowQR from "../UIWindowQR.js";
+
+export default {
+ id: 'security',
+ title_i18n_key: 'security',
+ icon: 'shield.svg',
+ html: () => {
+ let h = `
${i18n('security')}
`;
+
+ // change password button
+ if(!user.is_temp){
+ h += `
`;
+ h += `
${i18n('password')}`;
+ h += `
`;
+ h += ``;
+ h += `
`;
+ h += `
`;
+ }
+
+ // session manager
+ h += `
`;
+ h += `
${i18n('sessions')}`;
+ h += `
`;
+ h += ``;
+ h += `
`;
+ h += `
`;
+
+ // configure 2FA
+ if(!user.is_temp){
+ h += `
`;
+ h += `
`;
+ h += `${i18n('two_factor')}`;
+ h += `${
+ i18n(user.otp ? 'two_factor_enabled' : 'two_factor_disabled')
+ }`;
+ h += `
`;
+ h += `
`;
+ h += ``;
+ h += ``;
+ h += `
`;
+ h += `
`;
+ }
+
+
+ return h;
+ },
+ init: ($el_window) => {
+ $el_window.find('.enable-2fa').on('click', async function (e) {
+ const resp = await fetch(`${api_origin}/auth/configure-2fa/enable`, {
+ method: 'POST',
+ headers: {
+ Authorization: `Bearer ${puter.authToken}`,
+ 'Content-Type': 'application/json',
+ },
+ body: JSON.stringify({}),
+ });
+ const data = await resp.json();
+
+ UIWindowQR({
+ message_i18n_key: 'scan_qr_2fa',
+ text: data.url,
+ text_below: data.secret,
+ });
+
+ $el_window.find('.enable-2fa').hide();
+ $el_window.find('.disable-2fa').show();
+ $el_window.find('.user-otp-state').text(i18n('two_factor_enabled'));
+ });
+
+ $el_window.find('.disable-2fa').on('click', async function (e) {
+ const resp = await fetch(`${api_origin}/auth/configure-2fa/disable`, {
+ method: 'POST',
+ headers: {
+ Authorization: `Bearer ${puter.authToken}`,
+ 'Content-Type': 'application/json',
+ },
+ body: JSON.stringify({}),
+ });
+
+ $el_window.find('.enable-2fa').show();
+ $el_window.find('.disable-2fa').hide();
+ $el_window.find('.user-otp-state').text(i18n('two_factor_disabled'));
+ });
+ }
+}
\ No newline at end of file
diff --git a/src/UI/Settings/UIWindowSettings.js b/src/UI/Settings/UIWindowSettings.js
index 280a4903d..133cca307 100644
--- a/src/UI/Settings/UIWindowSettings.js
+++ b/src/UI/Settings/UIWindowSettings.js
@@ -21,6 +21,7 @@ import UIWindow from '../UIWindow.js'
import AboutTab from './UITabAbout.js';
import UsageTab from './UITabUsage.js';
import AccountTab from './UITabAccount.js';
+import SecurityTab from './UITabSecurity.js';
import PersonalizationTab from './UITabPersonalization.js';
import LanguageTab from './UITabLanguage.js';
import ClockTab from './UITabClock.js';
@@ -33,6 +34,7 @@ async function UIWindowSettings(options){
AboutTab,
UsageTab,
AccountTab,
+ SecurityTab,
PersonalizationTab,
LanguageTab,
ClockTab,
diff --git a/src/UI/UIWindowLogin.js b/src/UI/UIWindowLogin.js
index e3e78ada8..355cbd6a4 100644
--- a/src/UI/UIWindowLogin.js
+++ b/src/UI/UIWindowLogin.js
@@ -21,6 +21,8 @@ import UIWindow from './UIWindow.js'
import UIWindowSignup from './UIWindowSignup.js'
import UIWindowRecoverPassword from './UIWindowRecoverPassword.js'
import UIWindowVerificationCode from './UIWindowVerificationCode.js';
+import TeePromise from '../util/TeePromise.js';
+import UIAlert from './UIAlert.js';
async function UIWindowLogin(options){
options = options ?? {};
@@ -165,11 +167,45 @@ async function UIWindowLogin(options){
contentType: "application/json",
data: data,
success: async function (data){
+ let p = Promise.resolve();
if ( data.next_step === 'otp' ) {
- const value = await UIWindowVerificationCode();
- console.log('got value', value);
+ p = new TeePromise();
+ UIWindowVerificationCode({
+ title_key: 'confirm_code_2fa_title',
+ instruction_key: 'confirm_code_2fa_instruction',
+ submit_btn_key: 'confirm_code_2fa_submit_btn',
+ on_value: async ({ actions, win, value }) => {
+ try {
+ const resp = await fetch(`${api_origin}/login/otp`, {
+ method: 'POST',
+ headers: {
+ 'Content-Type': 'application/json',
+ },
+ body: JSON.stringify({
+ token: data.otp_jwt_token,
+ code: value,
+ }),
+ });
+
+ data = await resp.json();
+
+ if ( ! data.proceed ) {
+ actions.clear();
+ actions.show_error(i18n('confirm_code_generic_incorrect'));
+ return;
+ }
+
+ $(win).close();
+ p.resolve();
+ } catch (e) {
+ actions.show_error(e.message ?? i18n('error_unknown_cause'));
+ }
+ },
+ });
}
+ await p;
+
window.update_auth_data(data.token, data.user);
if(options.reload_on_success){
diff --git a/src/UI/UIWindowVerificationCode.js b/src/UI/UIWindowVerificationCode.js
index 2d82bd193..356e9afcc 100644
--- a/src/UI/UIWindowVerificationCode.js
+++ b/src/UI/UIWindowVerificationCode.js
@@ -7,7 +7,6 @@ const UIWindowVerificationCode = async function UIWindowVerificationCode ( optio
let is_checking_code = false;
const html_title = i18n(options.title_key || 'confirm_code_generic_title');
- const html_confirm = i18n(options.confirm_key || 'confirm_code_generic_confirm');
const html_instruction = i18n(options.instruction_key || 'confirm_code_generic_instruction');
const submit_btn_txt = i18n(options.submit_btn_key || 'confirm_code_generic_submit');
@@ -29,9 +28,6 @@ const UIWindowVerificationCode = async function UIWindowVerificationCode ( optio
`;
h += `
`;
h += ``;
- h += `
`;
- h += `what is this text`;
- h += `
`;
h += `