diff options
| author |  Inverle <inverle@proton.me>
| 2025-07-31 13:53:14 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2025-07-31 13:53:14 +0200 |
| commit | 3ce64d271b2b470bd6c9f7294946347dcdfed9b9 (patch) | |
| tree | 56b5a0928f1ce2b0486e866abd5456bc43ea8ed9 /app/views | |
| parent | d0425f8c3ab14e72142b1a4f946d57b408f26c88 (diff) | |
Implement sudo mode / reauthentication (#7753)
* Implement sudo mode / reauthentication
* i18n: fr
* generate flags
* Improvements
* Remove HMAC check
* Don't require reauth to access logs when signed in as admin
* Notify user of bad login via notification instead
---------
Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
Diffstat (limited to 'app/views')
| -rw-r--r-- | app/views/auth/reauth.phtml | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/app/views/auth/reauth.phtml b/app/views/auth/reauth.phtml new file mode 100644 index 000000000..d5b75decd --- /dev/null +++ b/app/views/auth/reauth.phtml @@ -0,0 +1,32 @@ +<?php + declare(strict_types=1); + /** @var FreshRSS_View $this */ +?> + +<main class="prompt"> + <h1><?= _t('gen.auth.reauth.header') ?></h1> + + <form id="crypto-form" method="post"> + <input type="hidden" name="_csrf" value="<?= FreshRSS_Auth::csrfToken() ?>" /> + <input type="hidden" id="username" value="<?= Minz_User::name() ?>" /> + <div class="form-group"> + <label for="passwordPlain"><?= _t('gen.auth.password') ?></label> + <div class="stick"> + <input type="password" id="passwordPlain" required="required" /> + <button type="button" class="btn toggle-password" data-toggle="passwordPlain"><?= _i('key') ?></button> + </div> + <input type="hidden" id="challenge" name="challenge" /> + <noscript><strong><?= _t('gen.js.should_be_activated') ?></strong></noscript> + </div> + <?php + $reauth_time = FreshRSS_Context::systemConf()->reauth_time; + ?> + <p class="help"><?= _i('help') ?> <?= _t('gen.auth.reauth.tip', intval($reauth_time / 60)) ?></p> + <div class="form-group form-group-actions"> + <button id="loginButton" type="submit" class="btn btn-important" disabled="disabled"> + <?= _t('gen.auth.login') ?> + </button> + </div> + </form> +</main> + |