Browse Source

[9.0][IMP] auth_totp: Secret key visible in wizard (#1409)

pull/1208/head
fkantelberg 6 years ago
committed by Pedro M. Baeza
parent
commit
365d824cfd
  1. 2
      auth_totp/__openerp__.py
  2. 1
      auth_totp/wizards/res_users_authenticator_create.py
  3. 4
      auth_totp/wizards/res_users_authenticator_create.xml

2
auth_totp/__openerp__.py

@ -5,7 +5,7 @@
{ {
'name': 'MFA Support', 'name': 'MFA Support',
'summary': 'Allows users to enable MFA and add optional trusted devices', 'summary': 'Allows users to enable MFA and add optional trusted devices',
'version': '9.0.1.0.1',
'version': '9.0.1.1.0',
'category': 'Extra Tools', 'category': 'Extra Tools',
'website': 'https://laslabs.com/', 'website': 'https://laslabs.com/',
'author': 'LasLabs, Odoo Community Association (OCA)', 'author': 'LasLabs, Odoo Community Association (OCA)',

1
auth_totp/wizards/res_users_authenticator_create.py

@ -29,6 +29,7 @@ class ResUsersAuthenticatorCreate(models.TransientModel):
index=True, index=True,
) )
secret_key = fields.Char( secret_key = fields.Char(
string='Secret Code',
default=lambda s: pyotp.random_base32(), default=lambda s: pyotp.random_base32(),
required=True, required=True,
) )

4
auth_totp/wizards/res_users_authenticator_create.xml

@ -15,14 +15,14 @@
<sheet> <sheet>
<div> <div>
<span>Please provide a name for your app/device. </span> <span>Please provide a name for your app/device. </span>
<span>Then scan the QR code below to add this account to your authenticator app and enter in the six digit code produced by the app.</span>
<span>Then scan the QR code or enter the secret code below to add this account to your authenticator app and enter in the six digit code produced by the app.</span>
</div> </div>
<group name="data"> <group name="data">
<field name="name"/> <field name="name"/>
<field name="user_id"/> <field name="user_id"/>
<field name="secret_key" readonly="1"/>
<field name="qr_code_tag"/> <field name="qr_code_tag"/>
<field name="confirmation_code"/> <field name="confirmation_code"/>
<field name="secret_key" invisible="1"/>
</group> </group>
</sheet> </sheet>
<footer> <footer>

Loading…
Cancel
Save