mirror of https://github.com/docusealco/docuseal
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
55 lines
1.5 KiB
55 lines
1.5 KiB
# frozen_string_literal: true
|
|
|
|
class MfaSetupController < ApplicationController
|
|
before_action do
|
|
authorize!(:update, current_user)
|
|
end
|
|
|
|
before_action :set_provision_url, only: %i[show new]
|
|
|
|
def show; end
|
|
|
|
def new; end
|
|
|
|
def edit; end
|
|
|
|
def create
|
|
if current_user.validate_and_consume_otp!(params[:otp_attempt])
|
|
current_user.otp_required_for_login = true
|
|
current_user.save!
|
|
|
|
redirect_to settings_profile_index_path, notice: '2FA has been configured'
|
|
else
|
|
@provision_url = current_user.otp_provisioning_uri(current_user.email, issuer: Docuseal.product_name)
|
|
|
|
@error_message = 'Code is invalid'
|
|
|
|
render turbo_stream: turbo_stream.replace(:mfa_form, partial: 'mfa_setup/form'), status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
def destroy
|
|
if current_user.validate_and_consume_otp!(params[:otp_attempt])
|
|
current_user.update!(otp_required_for_login: false, otp_secret: nil)
|
|
|
|
redirect_to settings_profile_index_path, notice: '2FA has been removed'
|
|
else
|
|
@error_message = 'Code is invalid'
|
|
|
|
render turbo_stream: turbo_stream.replace(:modal, template: 'mfa_setup/edit'), status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def set_provision_url
|
|
return redirect_to root_path, alert: '2FA has been set up already' if current_user.otp_required_for_login
|
|
|
|
current_user.otp_secret ||= User.generate_otp_secret
|
|
|
|
current_user.save!
|
|
|
|
@provision_url = current_user.otp_provisioning_uri(current_user.email, issuer: Docuseal.product_name)
|
|
end
|
|
end
|