From 85da98a004ef84f2a57c295fa398d38ccc60081e Mon Sep 17 00:00:00 2001
From: Matthias <matthias.mair@oewf.org>
Date: Sun, 31 Oct 2021 23:07:25 +0100
Subject: [PATCH] use auth screen to make more clear this is about security

---
 .../templates/allauth_2fa/authenticate.html   | 15 ++++++++
 .../templates/allauth_2fa/backup_tokens.html  | 32 +++++++++++++++++
 InvenTree/templates/allauth_2fa/remove.html   | 18 ++++++++++
 InvenTree/templates/allauth_2fa/setup.html    | 36 +++++++++++++++++++
 4 files changed, 101 insertions(+)
 create mode 100644 InvenTree/templates/allauth_2fa/authenticate.html
 create mode 100644 InvenTree/templates/allauth_2fa/backup_tokens.html
 create mode 100644 InvenTree/templates/allauth_2fa/remove.html
 create mode 100644 InvenTree/templates/allauth_2fa/setup.html

diff --git a/InvenTree/templates/allauth_2fa/authenticate.html b/InvenTree/templates/allauth_2fa/authenticate.html
new file mode 100644
index 0000000000..1a392fc44a
--- /dev/null
+++ b/InvenTree/templates/allauth_2fa/authenticate.html
@@ -0,0 +1,15 @@
+{% extends "account/base.html" %}
+{% load i18n crispy_forms_tags %}
+
+{% block content %}
+<h1>{% trans "Two-Factor Authentication" %}</h1>
+
+<form method="post" class="login">
+  {% csrf_token %}
+  {{ form|crispy }}
+
+  <button type="submit" class="btn btn-primary">
+    {% trans 'Authenticate' %}
+  </button>
+</form>
+{% endblock %}
diff --git a/InvenTree/templates/allauth_2fa/backup_tokens.html b/InvenTree/templates/allauth_2fa/backup_tokens.html
new file mode 100644
index 0000000000..fcb6a35914
--- /dev/null
+++ b/InvenTree/templates/allauth_2fa/backup_tokens.html
@@ -0,0 +1,32 @@
+{% extends "account/base.html" %}
+{% load i18n %}
+
+{% block content %}
+<h1>
+  {% trans "Two-Factor Authentication Backup Tokens" %}
+</h1>
+
+{% if backup_tokens %}
+  {% if reveal_tokens %}
+    <ul>
+      {% for token in backup_tokens %}
+        <li>{{ token.token }}</li>
+      {% endfor %}
+    </ul>
+  {% else %}
+    {% trans 'Backup tokens have been generated, but are not revealed here for security reasons. Press the button below to generate new ones.' %}
+  {% endif %}
+{% else %}
+  {% trans 'No tokens. Press the button below to generate some.' %}
+{% endif %}
+
+<form method="post">
+  {% csrf_token %}
+  <button type="submit">
+    {% trans 'Generate backup tokens' %}
+  </button>
+</form>
+
+<a href="{% url 'two-factor-remove' %}">Disable Two Factor</a>
+
+{% endblock %}
diff --git a/InvenTree/templates/allauth_2fa/remove.html b/InvenTree/templates/allauth_2fa/remove.html
new file mode 100644
index 0000000000..dd45ad19ea
--- /dev/null
+++ b/InvenTree/templates/allauth_2fa/remove.html
@@ -0,0 +1,18 @@
+{% extends "account/base.html" %}
+{% load i18n %}
+
+{% block content %}
+<h1>
+  {% trans "Disable Two-Factor Authentication" %}
+</h1>
+
+<p>{% trans "Are you sure?" %}</p>
+
+<form method="post">
+  {% csrf_token %}
+  <button type="submit">
+    {% trans 'Disable Two-Factor' %}
+  </button>
+</form>
+
+{% endblock %}
diff --git a/InvenTree/templates/allauth_2fa/setup.html b/InvenTree/templates/allauth_2fa/setup.html
new file mode 100644
index 0000000000..46d2f3a55c
--- /dev/null
+++ b/InvenTree/templates/allauth_2fa/setup.html
@@ -0,0 +1,36 @@
+{% extends "account/base.html" %}
+{% load i18n %}
+
+{% block content %}
+<h1>
+  {% trans "Setup Two-Factor Authentication" %}
+</h1>
+
+<h4>
+  {% trans 'Step 1' %}:
+</h4>
+
+<p>
+  {% trans 'Scan the QR code below with a token generator of your choice (for instance Google Authenticator).' %}
+</p>
+
+<img src="{{ qr_code_url }}" />
+
+<h4>
+  {% trans 'Step 2' %}:
+</h4>
+
+<p>
+  {% trans 'Input a token generated by the app:' %}
+</p>
+
+<form method="post">
+  {% csrf_token %}
+  {{ form.non_field_errors }}
+  {{ form.token.label }}: {{ form.token }}
+
+  <button type="submit">
+    {% trans 'Verify' %}
+  </button>
+</form>
+{% endblock %}