mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-19 09:50:15 +01:00
* 🔒 feat: add Two-Factor Authentication (2FA) with backup codes & QR support (#5684) * working version for generating TOTP and authenticate. * better looking UI * refactored + better TOTP logic * fixed issue with UI * fixed issue: remove initial setup when closing window before completion. * added: onKeyDown for verify and disable * refactored some code and cleaned it up a bit. * refactored some code and cleaned it up a bit. * refactored some code and cleaned it up a bit. * refactored some code and cleaned it up a bit. * fixed issue after updating to new main branch * updated example * refactored controllers * removed `passport-totp` not used. * update the generateBackupCodes function to generate 10 codes by default: * update the backup codes to an object. * fixed issue with backup codes not working * be able to disable 2FA with backup codes. * removed new env. replaced with JWT_SECRET * ✨ style: improved a11y and style for TwoFactorAuthentication * 🔒 fix: small types checks * ✨ feat: improve 2FA UI components * fix: remove unnecessary console log * add option to disable 2FA with backup codes * - add option to refresh backup codes - (optional) maybe show the user which backup codes have already been used? * removed text to be able to merge the main. * removed eng tx to be able to merge * fix: migrated lang to new format. * feat: rewrote whole 2FA UI + refactored 2FA backend * chore: resolving conflicts * chore: resolving conflicts * fix: missing packages, because of resolving conflicts. * fix: UI issue and improved a11y * fix: 2FA backup code not working * fix: update localization keys for UI consistency * fix: update button label to use localized text * fix: refactor backup codes regeneration and update localization keys * fix: remove outdated translation for shared links management * fix: remove outdated 2FA code prompts from translation.json * fix: add cursor styles for backup codes item based on usage state * fix: resolve conflict issue * fix: resolve conflict issue * fix: resolve conflict issue * fix: missing packages in package-lock.json * fix: add disabled opacity to the verify button in TwoFactorScreen * ⚙ fix: update 2FA logic to rely on backup codes instead of TOTP status * ⚙️ fix: Simplify user retrieval in 2FA logic by removing unnecessary TOTP secret query * ⚙️ test: Add unit tests for TwoFactorAuthController and twoFactorControllers * ⚙️ fix: Ensure backup codes are validated as an array before usage in 2FA components * ⚙️ fix: Update module path mappings in tests to use relative paths * ⚙️ fix: Update moduleNameMapper in jest.config.js to remove the caret from path mapping * ⚙️ refactor: Simplify import paths in TwoFactorAuthController and twoFactorControllers test files * ⚙️ test: Mock twoFactorService methods in twoFactorControllers tests * ⚙️ refactor: Comment out unused imports and mock setups in test files for two-factor authentication * ⚙️ refactor: removed files * refactor: Exclude totpSecret from user data retrieval in AuthController, LoginController, and jwtStrategy * refactor: Consolidate backup code verification to apply DRY and remove default array in user schema * refactor: Enhance two-factor authentication ux/flow with improved error handling and loading state management, prevent redirect to /login --------- Co-authored-by: Marco Beretta <81851188+berry-13@users.noreply.github.com> Co-authored-by: Danny Avila <danny@librechat.ai>
139 lines
4.2 KiB
TypeScript
139 lines
4.2 KiB
TypeScript
import { LockIcon, Trash } from 'lucide-react';
|
|
import React, { useState, useCallback } from 'react';
|
|
import {
|
|
Input,
|
|
Button,
|
|
Spinner,
|
|
OGDialog,
|
|
OGDialogContent,
|
|
OGDialogTrigger,
|
|
OGDialogHeader,
|
|
OGDialogTitle,
|
|
} from '~/components';
|
|
import { useDeleteUserMutation } from '~/data-provider';
|
|
import { useAuthContext } from '~/hooks/AuthContext';
|
|
import { useLocalize } from '~/hooks';
|
|
import { cn } from '~/utils';
|
|
import { LocalizeFunction } from '~/common';
|
|
|
|
const DeleteAccount = ({ disabled = false }: { title?: string; disabled?: boolean }) => {
|
|
const localize = useLocalize();
|
|
const { user, logout } = useAuthContext();
|
|
const { mutate: deleteUser, isLoading: isDeleting } = useDeleteUserMutation({
|
|
onMutate: () => logout(),
|
|
});
|
|
|
|
const [isDialogOpen, setDialogOpen] = useState<boolean>(false);
|
|
const [isLocked, setIsLocked] = useState(true);
|
|
|
|
const handleDeleteUser = () => {
|
|
if (!isLocked) {
|
|
deleteUser(undefined);
|
|
}
|
|
};
|
|
|
|
const handleInputChange = useCallback(
|
|
(newEmailInput: string) => {
|
|
const isEmailCorrect =
|
|
newEmailInput.trim().toLowerCase() === user?.email.trim().toLowerCase();
|
|
setIsLocked(!isEmailCorrect);
|
|
},
|
|
[user?.email],
|
|
);
|
|
|
|
return (
|
|
<>
|
|
<OGDialog open={isDialogOpen} onOpenChange={setDialogOpen}>
|
|
<div className="flex items-center justify-between">
|
|
<span>{localize('com_nav_delete_account')}</span>
|
|
<OGDialogTrigger asChild>
|
|
<Button
|
|
variant="destructive"
|
|
className="flex items-center justify-center rounded-lg transition-colors duration-200"
|
|
onClick={() => setDialogOpen(true)}
|
|
disabled={disabled}
|
|
>
|
|
{localize('com_ui_delete')}
|
|
</Button>
|
|
</OGDialogTrigger>
|
|
</div>
|
|
<OGDialogContent className="w-11/12 max-w-md">
|
|
<OGDialogHeader>
|
|
<OGDialogTitle className="text-lg font-medium leading-6">
|
|
{localize('com_nav_delete_account_confirm')}
|
|
</OGDialogTitle>
|
|
</OGDialogHeader>
|
|
<div className="mb-8 text-sm text-black dark:text-white">
|
|
<ul className="font-semibold text-amber-600">
|
|
<li>{localize('com_nav_delete_warning')}</li>
|
|
<li>{localize('com_nav_delete_data_info')}</li>
|
|
</ul>
|
|
</div>
|
|
<div className="flex-col items-center justify-center">
|
|
<div className="mb-4">
|
|
{renderInput(
|
|
localize('com_nav_delete_account_email_placeholder'),
|
|
'email-confirm-input',
|
|
user?.email ?? '',
|
|
(e) => handleInputChange(e.target.value),
|
|
)}
|
|
</div>
|
|
{renderDeleteButton(handleDeleteUser, isDeleting, isLocked, localize)}
|
|
</div>
|
|
</OGDialogContent>
|
|
</OGDialog>
|
|
</>
|
|
);
|
|
};
|
|
|
|
const renderInput = (
|
|
label: string,
|
|
id: string,
|
|
value: string,
|
|
onChange: (e: React.ChangeEvent<HTMLInputElement>) => void,
|
|
) => (
|
|
<div className="mb-4">
|
|
<label className="mb-1 block text-sm font-medium text-black dark:text-white" htmlFor={id}>
|
|
{label}
|
|
</label>
|
|
<Input id={id} onChange={onChange} placeholder={value} />
|
|
</div>
|
|
);
|
|
|
|
const renderDeleteButton = (
|
|
handleDeleteUser: () => void,
|
|
isDeleting: boolean,
|
|
isLocked: boolean,
|
|
localize: LocalizeFunction,
|
|
) => (
|
|
<button
|
|
className={cn(
|
|
'mt-4 flex w-full items-center justify-center rounded-lg bg-surface-tertiary px-4 py-2 transition-all duration-200',
|
|
isLocked ? 'cursor-not-allowed opacity-30' : 'bg-destructive text-destructive-foreground',
|
|
)}
|
|
onClick={handleDeleteUser}
|
|
disabled={isDeleting || isLocked}
|
|
>
|
|
{isDeleting ? (
|
|
<div className="flex h-6 justify-center">
|
|
<Spinner className="icon-sm m-auto" />
|
|
</div>
|
|
) : (
|
|
<>
|
|
{isLocked ? (
|
|
<>
|
|
<LockIcon className="size-5" />
|
|
<span className="ml-2">{localize('com_ui_locked')}</span>
|
|
</>
|
|
) : (
|
|
<>
|
|
<Trash className="size-5" />
|
|
<span className="ml-2">{localize('com_nav_delete_account_button')}</span>
|
|
</>
|
|
)}
|
|
</>
|
|
)}
|
|
</button>
|
|
);
|
|
|
|
export default DeleteAccount;
|