nodebb-plugin-2factor/static/lib/settings.js

In addition to regular authentication via username/password or SSO, a second layer of security can be configured, permitting access only if:

'use strict';

define('forum/account/2factor', ['api', 'alerts', 'bootbox'], function (api, alerts, bootbox) {
	var Settings = {};

	Settings.init = function () {
		document.querySelector('#content .list-group').addEventListener('click', (e) => {
			if (!e.target.closest('[data-action]') || Array.from(e.target.classList).includes('text-muted')) {
				return;
			}

			const action = e.target.getAttribute('data-action');
			Settings[action].call(e.target);
		});
	};

	Settings.setupTotp = function () {
		socket.emit('plugins.2factor.regenerate', async (err, data) => {
			if (err) {
				return alerts.error(err);
			}

			const message = await app.parseAndTranslate('partials/2factor/generate', data);
			const size = 'lg';

			var modal = bootbox.dialog({ title: '[[2factor:generate.title]]', message, size });
			var formEl = modal.find('form');
			var confirmEl = modal.find('button[data-action="confirm"]');
			var codeEl = modal.find('.2fa-confirm');

			confirmEl.on('click', function () {
				Settings.verifyTotp(data.key, codeEl.val(), modal);
			});

			formEl.on('submit', function (e) {
				e.preventDefault();
				Settings.verifyTotp(data.key, codeEl.val(), modal);
			});

			modal.on('shown.bs.modal', function () {
				codeEl.focus();
			});
		});
	};

	Settings.disableTotp = () => {
		bootbox.confirm('[[2factor:user.manage.disableTotp]]', function (confirm) {
			if (confirm) {
				api.del('/plugins/2factor/totp').then(ajaxify.refresh).catch(alerts.error);
			}
		});
	};

	Settings.disableAuthn = () => {
		bootbox.confirm('[[2factor:user.manage.disableAuthn]]', function (confirm) {
			if (confirm) {
				api.del('/plugins/2factor/authn').then(ajaxify.refresh).catch(alerts.error);
			}
		});
	};

	Settings.setupAuthn = function () {
		const self = this;
		self.classList.add('text-muted');
		const modal = bootbox.dialog({
			message: '[[2factor:authn.modal.content]]',
			closeButton: false,
			className: 'text-center',
		});
		api.get('/plugins/2factor/authn/register', {}).then(async (request) => {
			try {
				const webauthnJSON = await import('@github/webauthn-json');
				const response = await webauthnJSON.create({
					publicKey: request,
				});
				modal.modal('hide');

				api.post('/plugins/2factor/authn/register', response).then(() => {
					alerts.success('[[2factor:authn.success]]');
					setTimeout(document.location.reload.bind(document.location), 1000);
				}).catch(alerts.error);
			} catch (e) {
				modal.modal('hide');
				self.classList.remove('disabled');
				alerts.alert({
					message: '[[2factor:authn.error]]',
					timeout: 2500,
				});
			}
		});
	};

	Settings.verifyTotp = function (key, token, modal) {
		socket.emit('plugins.2factor.confirm', {
			key: key,
			token: token,
		}, function (err) {
			if (!err) {
				modal.modal('hide');
				ajaxify.refresh();
				alerts.success('[[2factor:generate.success]]');
			} else {
				// Probably a bad validation code
				var inputEl = modal.find('.2fa-confirm');
				inputEl.parent().addClass('has-error');
			}
		});
	};

	Settings.generateBackupCodes = function () {
		$.ajax(config.relative_path + '/login/2fa/backup', {
			method: 'put',
			headers: {
				'x-csrf-token': config.csrf_token,
			},
		}).done(function (data) {
			app.parseAndTranslate('partials/2factor/generateBackupCodes', data, function (html) {
				bootbox.dialog({
					title: '[[2factor:backup.generate.title]]',
					message: html,
					onEscape: true,
				});
			});
		});
	};

	return Settings;
});