mirror of
git://f0xx.org/ac/ac-be-auth
synced 2026-07-29 05:37:57 +03:00
5b316a5617
Phone-camera approval flow wording; sync deps for shortener QR PNG and secure session cookies. Co-authored-by: Cursor <cursoragent@cursor.com>
73 lines
3.6 KiB
PHP
73 lines
3.6 KiB
PHP
<?php
|
|
$bp = Auth::basePath();
|
|
$auth = Auth::authUrl();
|
|
if (!isset($twofaQr)) {
|
|
$twofaQr = AuthTwoFactorPage::qrPayload();
|
|
}
|
|
?>
|
|
<!DOCTYPE html>
|
|
<html lang="en" data-theme="dark">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>Two-factor — <?= h(cfg('app_name')) ?></title>
|
|
<script>
|
|
(function () {
|
|
var t = localStorage.getItem('crash_console_theme');
|
|
if (t === 'light' || t === 'dark') document.documentElement.setAttribute('data-theme', t);
|
|
var l = localStorage.getItem('crash_console_lang');
|
|
if (l === 'en' || l === 'ru') document.documentElement.setAttribute('lang', l);
|
|
})();
|
|
</script>
|
|
<link rel="icon" type="image/x-icon" href="<?= h($bp) ?>/assets/favicon.ico">
|
|
<link rel="apple-touch-icon" href="<?= h($bp) ?>/assets/apple-touch-icon.ico">
|
|
<link rel="stylesheet" href="<?= h($bp) ?>/assets/css/app.css">
|
|
<script src="<?= h($bp) ?>/assets/js/i18n.js" defer></script>
|
|
<script src="<?= h($bp) ?>/assets/js/two_factor.js" defer
|
|
<?php if (is_array($twofaQr) && !empty($twofaQr['raw_token'])): ?>
|
|
data-poll-token="<?= h($twofaQr['raw_token']) ?>"
|
|
data-poll-url="<?= h($auth) ?>/api/two-factor/poll"
|
|
<?php endif; ?>
|
|
></script>
|
|
</head>
|
|
<body class="login-page" data-base-path="<?= h($bp) ?>">
|
|
<div class="login-locale">
|
|
<label class="toolbar-select locale-toolbar-select" data-i18n-title="lang.label" title="Language">
|
|
<span class="locale-flag" aria-hidden="true">🇬🇧</span>
|
|
<select class="lang-select" data-i18n-aria="lang.label" aria-label="Language">
|
|
<option value="en">EN</option>
|
|
<option value="ru">RU</option>
|
|
</select>
|
|
</label>
|
|
</div>
|
|
<form class="login-card" method="post" action="<?= h($auth) ?>/two-factor" id="twofa-form">
|
|
<h1 data-i18n="twofa.title">Two-factor authentication</h1>
|
|
<?php if (is_array($twofaQr) && !empty($twofaQr['qr_url'])): ?>
|
|
<p class="muted" data-i18n="twofa.hint_scan">Scan with your <strong>phone camera</strong> (not Google Authenticator) to approve this sign-in on another device, or enter the 6-digit code from your authenticator app below.</p>
|
|
<figure class="twofa-qr-wrap" id="twofa-qr-wrap">
|
|
<img src="<?= h((string) $twofaQr['qr_url']) ?>" width="160" height="160" alt="QR code — scan with phone camera to approve sign-in" class="twofa-qr">
|
|
<figcaption class="muted" data-i18n="twofa.qr_caption">
|
|
Phone camera → tap link → Approve
|
|
<?php if (!empty($twofaQr['short_url'])): ?>
|
|
· <a href="<?= h((string) $twofaQr['short_url']) ?>" rel="noopener"><?= h((string) $twofaQr['short_url']) ?></a>
|
|
<?php endif; ?>
|
|
</figcaption>
|
|
</figure>
|
|
<div id="twofa-approval-status" class="muted" style="margin-bottom:0.75rem;display:none;" data-i18n="twofa.waiting_approval">
|
|
Waiting for mobile approval…
|
|
</div>
|
|
<?php else: ?>
|
|
<p class="muted" data-i18n="twofa.hint">Enter the 6-digit code from your authenticator app.</p>
|
|
<?php endif; ?>
|
|
<?php if (!empty($twofaError)): ?>
|
|
<div class="alert" data-i18n="twofa.error"><?= h($twofaError) ?></div>
|
|
<?php endif; ?>
|
|
<label><span data-i18n="twofa.code">Authentication code</span>
|
|
<input id="twofa-code-input" name="code" inputmode="numeric" pattern="[0-9]{6}" maxlength="6" autocomplete="one-time-code" required autofocus></label>
|
|
<button type="submit" data-i18n="twofa.submit">Continue</button>
|
|
<p class="hint"><a href="<?= h($auth) ?>/login" data-i18n="twofa.cancel">Cancel</a></p>
|
|
</form>
|
|
<?php platform_render_footer(); ?>
|
|
</body>
|
|
</html>
|