* 🔒 feat: add Two-Factor Authentication (2FA) with backup codes & QR support (#5684)
* working version for generating TOTP and authenticate.
* better looking UI
* refactored + better TOTP logic
* fixed issue with UI
* fixed issue: remove initial setup when closing window before completion.
* added: onKeyDown for verify and disable
* refactored some code and cleaned it up a bit.
* refactored some code and cleaned it up a bit.
* refactored some code and cleaned it up a bit.
* refactored some code and cleaned it up a bit.
* fixed issue after updating to new main branch
* updated example
* refactored controllers
* removed `passport-totp` not used.
* update the generateBackupCodes function to generate 10 codes by default:
* update the backup codes to an object.
* fixed issue with backup codes not working
* be able to disable 2FA with backup codes.
* removed new env. replaced with JWT_SECRET
* ✨ style: improved a11y and style for TwoFactorAuthentication
* 🔒 fix: small types checks
* ✨ feat: improve 2FA UI components
* fix: remove unnecessary console log
* add option to disable 2FA with backup codes
* - add option to refresh backup codes
- (optional) maybe show the user which backup codes have already been used?
* removed text to be able to merge the main.
* removed eng tx to be able to merge
* fix: migrated lang to new format.
* feat: rewrote whole 2FA UI + refactored 2FA backend
* chore: resolving conflicts
* chore: resolving conflicts
* fix: missing packages, because of resolving conflicts.
* fix: UI issue and improved a11y
* fix: 2FA backup code not working
* fix: update localization keys for UI consistency
* fix: update button label to use localized text
* fix: refactor backup codes regeneration and update localization keys
* fix: remove outdated translation for shared links management
* fix: remove outdated 2FA code prompts from translation.json
* fix: add cursor styles for backup codes item based on usage state
* fix: resolve conflict issue
* fix: resolve conflict issue
* fix: resolve conflict issue
* fix: missing packages in package-lock.json
* fix: add disabled opacity to the verify button in TwoFactorScreen
* ⚙ fix: update 2FA logic to rely on backup codes instead of TOTP status
* ⚙️ fix: Simplify user retrieval in 2FA logic by removing unnecessary TOTP secret query
* ⚙️ test: Add unit tests for TwoFactorAuthController and twoFactorControllers
* ⚙️ fix: Ensure backup codes are validated as an array before usage in 2FA components
* ⚙️ fix: Update module path mappings in tests to use relative paths
* ⚙️ fix: Update moduleNameMapper in jest.config.js to remove the caret from path mapping
* ⚙️ refactor: Simplify import paths in TwoFactorAuthController and twoFactorControllers test files
* ⚙️ test: Mock twoFactorService methods in twoFactorControllers tests
* ⚙️ refactor: Comment out unused imports and mock setups in test files for two-factor authentication
* ⚙️ refactor: removed files
* refactor: Exclude totpSecret from user data retrieval in AuthController, LoginController, and jwtStrategy
* refactor: Consolidate backup code verification to apply DRY and remove default array in user schema
* refactor: Enhance two-factor authentication ux/flow with improved error handling and loading state management, prevent redirect to /login
---------
Co-authored-by: Marco Beretta <81851188+berry-13@users.noreply.github.com>
Co-authored-by: Danny Avila <danny@librechat.ai>
* feat: settings tba accessible
* refactor: cleanup unused code
* refactor: improve accessibility and user experience in ChatDirection component
* style: focus ring primary class
* improve a11y of avatar dialog
* style: a11y improvements for Settings
* style: focus ring primary class in OriginalDialog component
---------
Co-authored-by: Danny Avila <danny@librechat.ai>
* initial commit
* fix: UserController bugs; fix: lint errors
* fix: delete files
* language support
* style(DeleteAccount): update to the latest style
* style: fix after merge main
* chore: Add canDeleteAccount middleware for user deletion endpoint
* chore: renamed to ALLOW_ACCOUNT_DELETION
* fix(canDeleteAccount): use uppercase admin role
* chore: imports order
* chore: Enable account deletion by default if omitted/commented out
* chore: Add logging for user account deletion
* chore: Bump data-provider package version to 0.6.6
* chore: Import Transaction model in UserController
* chore: Update CONFIG_VERSION to 1.1.4
* chore: Update user account deletion logging
* chore: Refactor user account deletion logic
---------
Co-authored-by: Berry-13 <root@Berry>
Co-authored-by: Danny Avila <messagedaniel@protonmail.com>
Co-authored-by: Danny Avila <danny@librechat.ai>
* feat: Minor design changes to mimic OpenAI's latest login page
* fix: Optimize ThemeSelector for mobile
* fix: Use a svg for the logo for transperency in dark mode
* feat: Update styles for Registration
* feat: Update error colors for login & registration
* fix: remove medium font
* wip: Dropdown menu
* feat: Update dropdown to match ChatGPT
* feat: Improve rounding and padding
* feat: Add UI Updates to RequestPasswordReset, PasswordRest and increase width for theme dropdown
* fix: Modify the My Files modal's width to not touch the screen
* feat: fix scrolling for dropdown, and make border width lighter
* feat: Match popup menu design to OpenAI (p1/2)
* fix+feat: fix dark mode, add user email, add lighter borders
* fix: Add border color on focus of chat input.
* feat: Move Export Conversation to a seperate button (testing)
* fix: Properly center Login, Registration, Reset Password Flow
* fix: Border colors on dark mode for settings modal
* feat: Improve wording for settings menu
* fix: Optimize settings modal for mobile and fix height for modal
* feat: Optimize for desktop
* fix: make TooltipTrigger asChild of button, improve settings mobile responsiveness
* feat: Handle dropdowns properly
TODO: Make height dynamic, fix dark mode colors
* fix: input styles
fix: make endpoint icon smaller
* feat: Update UI to Match ChatGPT Style
- Updated the dropdown styles to match the aesthetic of ChatGPT.
- Decreased spacing within the conversation area for cleanliness.
- Replaced the current archive icon with the ChatGPT's icon.
* fix: fix colors for EditMenuButton & ArchiveButton for dark mode and light mode
* fix: ui fixes
* fix: Fix Conversation UI Bugs
* fix: transparency of HoverToggle to make buttons not visible
* fix: dark mode HoverToggle & compress menu item spacing
* fix: responsiveness of export icon
* fix: first mentionitem is set to always be highlighted
* fix: improve hover state to text instead of bg
* feat: Update icons to ChatGPT Style
* fix: dark mode hover for PanelFileCell
* fix: change navlinks z-index to 100
* fix: hover states for DataTable
* feat: Move ExportButton to seperate component
* chore: remove unused imports
* BIG UI UPDATE
* fix: search bar, dialog template, new chat icon, convo icon and delete/rename button
* moved some color config and a lot of files
* small text fixes and tailwind config refactor
* Update localization and UI styles
* Update styles and add user-select:none to Tooltip component
* Update mobile.css styles for navigation mask and background color
* Update component imports and styles
* Update DeleteButton imports and references
* Update UI components
* Update tooltip delay duration
* Fix styling and update text in various components
* fixed assistant style
* minor style fixes
* revert: removed CreationHeader & CreationPanel
* style: match new styling for SidePanel
* style: match bg-gray-800 to ChatGPT (#212121)
* style: remove slate for gray where applicable to match new light theme
---------
Co-authored-by: Danny Avila <messagedaniel@protonmail.com>
* 👤add: Username instead of 'You' when sending messages.
* 🌎: Added a new translation for 'You' and updated the existing translation for Spanish.
* fix: remove "!"
* Added: New setting Account for show username in messages
chore (StopButon and SendButon): Updated to new style of ChatGPT
chore Update and Added news translations: Spanish, English and Portuguese Brazilian
* fix: message component definition and imports order, remove unnecessary useEffect and localStorage set, fix localStorage key in store
* chore: update readme.md
* chore: optimize condition for messageLabel
* chore(Message.tsx): remove empty blocks
---------
Co-authored-by: Raí Santos <140329135+itzraiss@users.noreply.github.com>
* localization + api-endpoint
* docs: added firebase documentation
* chore: icons
* chore: SettingsTabs
* feat: account pannel; fix: gear icons
* docs: position update
* feat: firebase
* feat: plugin support
* route
* fixed bugs with firebase and moved a lot of files
* chore(DALLE3): using UUID v4
* feat: support for social strategies; moved '/images' path
* fix: data ignored
* gitignore update
* docs: update firebase guide
* refactor: Firebase
- use singleton pattern for firebase initialization, initially on server start
- reorganize imports, move firebase specific files to own service under Files
- rename modules to remove 'avatar' redundancy
- fix imports based on changes
* ci(DALLE/DALLE3): fix tests to use logger and new expected outputs, add firebase tests
* refactor(loadToolWithAuth): pass userId to tool as field
* feat(images/parse): feat: Add URL Image Basename Extraction
Implement a new module to extract the basename of an image from a given URL. This addition includes the function, which parses the URL and retrieves the basename using the Node.js 'url' and 'path' modules. The function is documented with JSDoc comments for better maintainability and understanding. This feature enhances the application's ability to handle and process image URLs efficiently.
* refactor(addImages): function to use a more specific regular expression for observedImagePath based on the generated image markdown standard across the app
* refactor(DALLE/DALLE3): utilize `getImageBasename` and `this.userId`; fix: pass correct image path to firebase url helper
* fix(addImages): make more general to match any image markdown descriptor
* fix(parse/getImageBasename): test result of this function for an actual image basename
* ci(DALLE3): mock getImageBasename
* refactor(AuthContext): use Recoil atom state for user
* feat: useUploadAvatarMutation, react-query hook for avatar upload
* fix(Toast): stack z-order of Toast over all components (1000)
* refactor(showToast): add optional status field to avoid importing NotificationSeverity on each use of the function
* refactor(routes/avatar): remove unnecessary get route, get userId from req.user.id, require auth on POST request
* chore(uploadAvatar): TODO: remove direct use of Model, `User`
* fix(client): fix Spinner imports
* refactor(Avatar): use react-query hook, Toast, remove unnecessary states, add optimistic UI to upload
* fix(avatar/localStrategy): correctly save local profile picture and cache bust for immediate rendering; fix: firebase init info message (only show once)
* fix: use `includes` instead of `endsWith` for checking manual query of avatar image path in case more queries are appended (as is done in avatar/localStrategy)
---------
Co-authored-by: Danny Avila <messagedaniel@protonmail.com>
