🔒 feat: Two-Factor Authentication with Backup Codes & QR support (#5685)

* 🔒 feat: add Two-Factor Authentication (2FA) with backup codes & QR support (#5684)

* working version for generating TOTP and authenticate.

* better looking UI

* refactored + better TOTP logic

* fixed issue with UI

* fixed issue: remove initial setup when closing window before completion.

* added: onKeyDown for verify and disable

* refactored some code and cleaned it up a bit.

* refactored some code and cleaned it up a bit.

* refactored some code and cleaned it up a bit.

* refactored some code and cleaned it up a bit.

* fixed issue after updating to new main branch

* updated example

* refactored controllers

* removed `passport-totp` not used.

* update the generateBackupCodes function to generate 10 codes by default:

* update the backup codes to an object.

* fixed issue with backup codes not working

* be able to disable 2FA with backup codes.

* removed new env. replaced with JWT_SECRET

* ✨ style: improved a11y and style for TwoFactorAuthentication

* 🔒 fix: small types checks

* ✨ feat: improve 2FA UI components

* fix: remove unnecessary console log

* add option to disable 2FA with backup codes

* - add option to refresh backup codes
- (optional) maybe show the user which backup codes have already been used?

* removed text to be able to merge the main.

* removed eng tx to be able to merge

* fix: migrated lang to new format.

* feat: rewrote whole 2FA UI + refactored 2FA backend

* chore: resolving conflicts

* chore: resolving conflicts

* fix: missing packages, because of resolving conflicts.

* fix: UI issue and improved a11y

* fix: 2FA backup code not working

* fix: update localization keys for UI consistency

* fix: update button label to use localized text

* fix: refactor backup codes regeneration and update localization keys

* fix: remove outdated translation for shared links management

* fix: remove outdated 2FA code prompts from translation.json

* fix: add cursor styles for backup codes item based on usage state

* fix: resolve conflict issue

* fix: resolve conflict issue

* fix: resolve conflict issue

* fix: missing packages in package-lock.json

* fix: add disabled opacity to the verify button in TwoFactorScreen

* ⚙ fix: update 2FA logic to rely on backup codes instead of TOTP status

* ⚙️ fix: Simplify user retrieval in 2FA logic by removing unnecessary TOTP secret query

* ⚙️ test: Add unit tests for TwoFactorAuthController and twoFactorControllers

* ⚙️ fix: Ensure backup codes are validated as an array before usage in 2FA components

* ⚙️ fix: Update module path mappings in tests to use relative paths

* ⚙️ fix: Update moduleNameMapper in jest.config.js to remove the caret from path mapping

* ⚙️ refactor: Simplify import paths in TwoFactorAuthController and twoFactorControllers test files

* ⚙️ test: Mock twoFactorService methods in twoFactorControllers tests

* ⚙️ refactor: Comment out unused imports and mock setups in test files for two-factor authentication

* ⚙️ refactor: removed files

* refactor: Exclude totpSecret from user data retrieval in AuthController, LoginController, and jwtStrategy

* refactor: Consolidate backup code verification to apply DRY and remove default array in user schema

* refactor: Enhance two-factor authentication ux/flow with improved error handling and loading state management, prevent redirect to /login

---------

Co-authored-by: Marco Beretta <81851188+berry-13@users.noreply.github.com>
Co-authored-by: Danny Avila <danny@librechat.ai>

client/src/locales/nl/translation.json

@@ -93,7 +93,6 @@
   "com_endpoint_google_temp": "Hogere waarden = meer willekeurig, terwijl lagere waarden = meer gericht en deterministisch. We raden aan dit of Top P te wijzigen, maar niet beide.",
   "com_endpoint_google_topk": "Top-k verandert hoe het model tokens selecteert voor uitvoer. Een top-k van 1 betekent dat het geselecteerde token het meest waarschijnlijk is van alle tokens in de vocabulaire van het model (ook wel 'greedy decoding' genoemd), terwijl een top-k van 3 betekent dat het volgende token wordt geselecteerd uit de 3 meest waarschijnlijke tokens (met behulp van temperatuur).",
   "com_endpoint_google_topp": "Top-p verandert hoe het model tokens selecteert voor uitvoer. Tokens worden geselecteerd van meest K (zie topK-parameter) waarschijnlijk tot minst waarschijnlijk totdat de som van hun kansen gelijk is aan de top-p-waarde.",
-  "com_endpoint_import": "Importeren",
   "com_endpoint_max_output_tokens": "Max. uitvoertokens",
   "com_endpoint_my_preset": "Mijn voorinstelling",
   "com_endpoint_no_presets": "Nog geen voorinstellingen, gebruik de instellingenknop om er een te maken",
@@ -127,7 +126,6 @@
   "com_nav_archive_name": "Naam",
   "com_nav_archived_chats": "Gearchiveerde chats",
   "com_nav_archived_chats_empty": "Geen gearchiveerde chats",
-  "com_nav_archived_chats_manage": "Beheren",
   "com_nav_auto_scroll": "Automatisch scrollen naar Nieuwste bij openen",
   "com_nav_balance": "Evenwicht",
   "com_nav_clear_all_chats": "Alle chats wissen",
@@ -182,7 +180,6 @@
   "com_nav_setting_general": "Algemeen",
   "com_nav_settings": "Instellingen",
   "com_nav_shared_links": "Gedeelde links",
-  "com_nav_shared_links_manage": "Beheren",
   "com_nav_theme": "Thema",
   "com_nav_theme_dark": "Donker",
   "com_nav_theme_light": "Licht",
@@ -222,7 +219,7 @@
   "com_ui_enter": "Invoeren",
   "com_ui_examples": "Voorbeelden",
   "com_ui_happy_birthday": "Het is mijn eerste verjaardag!",
-  "com_ui_import_conversation": "Importeren",
+  "com_ui_import": "Importeren",
   "com_ui_import_conversation_error": "Er is een fout opgetreden bij het importeren van je gesprekken",
   "com_ui_import_conversation_info": "Gesprekken importeren vanuit een JSON-bestand",
   "com_ui_import_conversation_success": "Gesprekken succesvol geïmporteerd",
@@ -253,4 +250,4 @@
   "com_ui_unarchive_error": "Kan conversatie niet uit archiveren",
   "com_ui_upload_success": "Bestand succesvol geüpload",
   "com_ui_use_prompt": "Gebruik prompt"
-}
+}