mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-22 19:30:15 +01:00
* 🔒 feat: add Two-Factor Authentication (2FA) with backup codes & QR support (#5684) * working version for generating TOTP and authenticate. * better looking UI * refactored + better TOTP logic * fixed issue with UI * fixed issue: remove initial setup when closing window before completion. * added: onKeyDown for verify and disable * refactored some code and cleaned it up a bit. * refactored some code and cleaned it up a bit. * refactored some code and cleaned it up a bit. * refactored some code and cleaned it up a bit. * fixed issue after updating to new main branch * updated example * refactored controllers * removed `passport-totp` not used. * update the generateBackupCodes function to generate 10 codes by default: * update the backup codes to an object. * fixed issue with backup codes not working * be able to disable 2FA with backup codes. * removed new env. replaced with JWT_SECRET * ✨ style: improved a11y and style for TwoFactorAuthentication * 🔒 fix: small types checks * ✨ feat: improve 2FA UI components * fix: remove unnecessary console log * add option to disable 2FA with backup codes * - add option to refresh backup codes - (optional) maybe show the user which backup codes have already been used? * removed text to be able to merge the main. * removed eng tx to be able to merge * fix: migrated lang to new format. * feat: rewrote whole 2FA UI + refactored 2FA backend * chore: resolving conflicts * chore: resolving conflicts * fix: missing packages, because of resolving conflicts. * fix: UI issue and improved a11y * fix: 2FA backup code not working * fix: update localization keys for UI consistency * fix: update button label to use localized text * fix: refactor backup codes regeneration and update localization keys * fix: remove outdated translation for shared links management * fix: remove outdated 2FA code prompts from translation.json * fix: add cursor styles for backup codes item based on usage state * fix: resolve conflict issue * fix: resolve conflict issue * fix: resolve conflict issue * fix: missing packages in package-lock.json * fix: add disabled opacity to the verify button in TwoFactorScreen * ⚙ fix: update 2FA logic to rely on backup codes instead of TOTP status * ⚙️ fix: Simplify user retrieval in 2FA logic by removing unnecessary TOTP secret query * ⚙️ test: Add unit tests for TwoFactorAuthController and twoFactorControllers * ⚙️ fix: Ensure backup codes are validated as an array before usage in 2FA components * ⚙️ fix: Update module path mappings in tests to use relative paths * ⚙️ fix: Update moduleNameMapper in jest.config.js to remove the caret from path mapping * ⚙️ refactor: Simplify import paths in TwoFactorAuthController and twoFactorControllers test files * ⚙️ test: Mock twoFactorService methods in twoFactorControllers tests * ⚙️ refactor: Comment out unused imports and mock setups in test files for two-factor authentication * ⚙️ refactor: removed files * refactor: Exclude totpSecret from user data retrieval in AuthController, LoginController, and jwtStrategy * refactor: Consolidate backup code verification to apply DRY and remove default array in user schema * refactor: Enhance two-factor authentication ux/flow with improved error handling and loading state management, prevent redirect to /login --------- Co-authored-by: Marco Beretta <81851188+berry-13@users.noreply.github.com> Co-authored-by: Danny Avila <danny@librechat.ai>
68 lines
2.1 KiB
TypeScript
68 lines
2.1 KiB
TypeScript
import * as React from 'react';
|
|
import { OTPInput, OTPInputContext } from 'input-otp';
|
|
import { Minus } from 'lucide-react';
|
|
import { cn } from '~/utils';
|
|
|
|
const InputOTP = React.forwardRef<
|
|
React.ElementRef<typeof OTPInput>,
|
|
React.ComponentPropsWithoutRef<typeof OTPInput>
|
|
>(({ className, containerClassName, ...props }, ref) => (
|
|
<OTPInput
|
|
ref={ref}
|
|
containerClassName={cn(
|
|
'flex items-center gap-2 has-[:disabled]:opacity-50',
|
|
containerClassName,
|
|
)}
|
|
className={cn('disabled:cursor-not-allowed', className)}
|
|
{...props}
|
|
/>
|
|
));
|
|
InputOTP.displayName = 'InputOTP';
|
|
|
|
const InputOTPGroup = React.forwardRef<
|
|
React.ElementRef<'div'>,
|
|
React.ComponentPropsWithoutRef<'div'>
|
|
>(({ className, ...props }, ref) => (
|
|
<div ref={ref} className={cn('flex items-center', className)} {...props} />
|
|
));
|
|
InputOTPGroup.displayName = 'InputOTPGroup';
|
|
|
|
const InputOTPSlot = React.forwardRef<
|
|
React.ElementRef<'div'>,
|
|
React.ComponentPropsWithoutRef<'div'> & { index: number }
|
|
>(({ index, className, ...props }, ref) => {
|
|
const inputOTPContext = React.useContext(OTPInputContext);
|
|
const { char, hasFakeCaret, isActive } = inputOTPContext.slots[index];
|
|
|
|
return (
|
|
<div
|
|
ref={ref}
|
|
className={cn(
|
|
'text-md relative flex h-11 w-11 items-center justify-center border-y border-r border-input shadow-sm transition-all first:rounded-l-xl first:border-l last:rounded-r-xl',
|
|
isActive && 'z-10 ring-1 ring-ring',
|
|
className,
|
|
)}
|
|
{...props}
|
|
>
|
|
{char}
|
|
{hasFakeCaret && (
|
|
<div className="pointer-events-none absolute inset-0 flex items-center justify-center">
|
|
<div className="animate-caret-blink h-4 w-px bg-foreground duration-1000" />
|
|
</div>
|
|
)}
|
|
</div>
|
|
);
|
|
});
|
|
InputOTPSlot.displayName = 'InputOTPSlot';
|
|
|
|
const InputOTPSeparator = React.forwardRef<
|
|
React.ElementRef<'div'>,
|
|
React.ComponentPropsWithoutRef<'div'>
|
|
>(({ ...props }, ref) => (
|
|
<div ref={ref} role="separator" {...props}>
|
|
<Minus />
|
|
</div>
|
|
));
|
|
InputOTPSeparator.displayName = 'InputOTPSeparator';
|
|
|
|
export { InputOTP, InputOTPGroup, InputOTPSlot, InputOTPSeparator };
|