feat(KAN-37): rebuild security and application key settings
This commit is contained in:
@@ -1,222 +1,340 @@
|
||||
<script setup lang="ts">
|
||||
import { Form, Head } from '@inertiajs/vue3';
|
||||
import { Head, useForm } from '@inertiajs/vue3';
|
||||
import { ShieldCheck } from 'lucide-vue-next';
|
||||
import { onUnmounted, ref } from 'vue';
|
||||
import SecurityController from '@/actions/App/Http/Controllers/Settings/SecurityController';
|
||||
import Heading from '@/components/Heading.vue';
|
||||
import { computed, onUnmounted, ref } from 'vue';
|
||||
import { update } from '@/actions/App/Http/Controllers/Settings/SecurityController';
|
||||
import AuthFormFeedback from '@/components/AuthFormFeedback.vue';
|
||||
import InputError from '@/components/InputError.vue';
|
||||
import PasswordInput from '@/components/PasswordInput.vue';
|
||||
import TwoFactorRecoveryCodes from '@/components/TwoFactorRecoveryCodes.vue';
|
||||
import TwoFactorSetupModal from '@/components/TwoFactorSetupModal.vue';
|
||||
import { Button } from '@/components/ui/button';
|
||||
import { Card, CardContent, CardHeader } from '@/components/ui/card';
|
||||
import {
|
||||
Dialog,
|
||||
DialogContent,
|
||||
DialogDescription,
|
||||
DialogFooter,
|
||||
DialogHeader,
|
||||
DialogTitle,
|
||||
} from '@/components/ui/dialog';
|
||||
import { Label } from '@/components/ui/label';
|
||||
import { useTwoFactorAuth } from '@/composables/useTwoFactorAuth';
|
||||
import { useFormProtection } from '@/composables/useFormProtection';
|
||||
import { useLocalization } from '@/composables/useLocalization';
|
||||
import AppLayout from '@/layouts/AppLayout.vue';
|
||||
import SettingsLayout from '@/layouts/settings/Layout.vue';
|
||||
import { edit } from '@/routes/security/index';
|
||||
import { disable, enable } from '@/routes/two-factor';
|
||||
import type { BreadcrumbItem } from '@/types';
|
||||
|
||||
type Props = {
|
||||
canManageTwoFactor?: boolean;
|
||||
mustChangePassword?: boolean;
|
||||
requiresConfirmation?: boolean;
|
||||
status?: string | null;
|
||||
twoFactorEnabled?: boolean;
|
||||
};
|
||||
|
||||
withDefaults(defineProps<Props>(), {
|
||||
canManageTwoFactor: false,
|
||||
mustChangePassword: false,
|
||||
requiresConfirmation: false,
|
||||
status: null,
|
||||
twoFactorEnabled: false,
|
||||
});
|
||||
|
||||
const breadcrumbs: BreadcrumbItem[] = [
|
||||
const props = withDefaults(
|
||||
defineProps<{
|
||||
canManageTwoFactor?: boolean;
|
||||
requiresConfirmation?: boolean;
|
||||
twoFactorEnabled?: boolean;
|
||||
}>(),
|
||||
{
|
||||
title: 'Security settings',
|
||||
href: edit(),
|
||||
canManageTwoFactor: false,
|
||||
requiresConfirmation: false,
|
||||
twoFactorEnabled: false,
|
||||
},
|
||||
];
|
||||
);
|
||||
const { t } = useLocalization();
|
||||
const breadcrumbs = computed<BreadcrumbItem[]>(() => [
|
||||
{ title: t('navigation.security'), href: edit() },
|
||||
]);
|
||||
const passwordForm = useForm({
|
||||
current_password: '',
|
||||
password: '',
|
||||
password_confirmation: '',
|
||||
}).dontRemember('current_password', 'password', 'password_confirmation');
|
||||
const passwordProtection = useFormProtection(passwordForm, {
|
||||
isDirty: () => false,
|
||||
});
|
||||
const twoFactorForm = useForm({});
|
||||
const twoFactorProtection = useFormProtection(twoFactorForm);
|
||||
const showSetupModal = ref(false);
|
||||
const showDisableDialog = ref(false);
|
||||
const setupStarted = ref(false);
|
||||
|
||||
const { hasSetupData, clearTwoFactorAuthData } = useTwoFactorAuth();
|
||||
const showSetupModal = ref<boolean>(false);
|
||||
|
||||
onUnmounted(() => clearTwoFactorAuthData());
|
||||
function savePassword(): void {
|
||||
passwordProtection.submit(update(), {
|
||||
preserveScroll: true,
|
||||
onFinish: () => passwordForm.reset(),
|
||||
});
|
||||
}
|
||||
function startSetup(): void {
|
||||
if (setupStarted.value) {
|
||||
showSetupModal.value = true;
|
||||
return;
|
||||
}
|
||||
twoFactorProtection.submit(enable(), {
|
||||
preserveScroll: true,
|
||||
onSuccess: () => {
|
||||
setupStarted.value = true;
|
||||
showSetupModal.value = true;
|
||||
},
|
||||
});
|
||||
}
|
||||
function disableTwoFactor(): void {
|
||||
twoFactorProtection.submit(disable(), {
|
||||
preserveScroll: true,
|
||||
onSuccess: () => {
|
||||
showDisableDialog.value = false;
|
||||
setupStarted.value = false;
|
||||
},
|
||||
});
|
||||
}
|
||||
function updateDisableDialog(open: boolean): void {
|
||||
if (!twoFactorForm.processing) {
|
||||
showDisableDialog.value = open;
|
||||
twoFactorProtection.clearFeedback();
|
||||
}
|
||||
}
|
||||
onUnmounted(() => passwordForm.reset());
|
||||
</script>
|
||||
|
||||
<template>
|
||||
<AppLayout :breadcrumbs="breadcrumbs">
|
||||
<Head title="Security settings" />
|
||||
|
||||
<h1 class="sr-only">Security settings</h1>
|
||||
|
||||
<Head :title="t('security.title')" />
|
||||
<SettingsLayout>
|
||||
<div
|
||||
v-if="mustChangePassword || status"
|
||||
class="rounded-xl border border-amber-200 bg-amber-50 px-4 py-3 text-sm text-amber-900 dark:border-amber-900/70 dark:bg-amber-950/40 dark:text-amber-100"
|
||||
>
|
||||
{{
|
||||
mustChangePassword
|
||||
? 'You must change your password before continuing anywhere else in the app.'
|
||||
: status
|
||||
}}
|
||||
</div>
|
||||
|
||||
<div class="space-y-6">
|
||||
<Heading
|
||||
variant="small"
|
||||
title="Update password"
|
||||
description="Ensure your account is using a long, random password to stay secure"
|
||||
/>
|
||||
|
||||
<Form
|
||||
v-bind="SecurityController.update.form()"
|
||||
:options="{
|
||||
preserveScroll: true,
|
||||
}"
|
||||
reset-on-success
|
||||
:reset-on-error="[
|
||||
'password',
|
||||
'password_confirmation',
|
||||
'current_password',
|
||||
]"
|
||||
class="space-y-6"
|
||||
v-slot="{ errors, processing, recentlySuccessful }"
|
||||
>
|
||||
<div class="grid gap-2">
|
||||
<Label for="current_password">Current password</Label>
|
||||
<PasswordInput
|
||||
id="current_password"
|
||||
name="current_password"
|
||||
class="mt-1 block w-full"
|
||||
autocomplete="current-password"
|
||||
placeholder="Current password"
|
||||
/>
|
||||
<InputError :message="errors.current_password" />
|
||||
</div>
|
||||
|
||||
<div class="grid gap-2">
|
||||
<Label for="password">New password</Label>
|
||||
<PasswordInput
|
||||
id="password"
|
||||
name="password"
|
||||
class="mt-1 block w-full"
|
||||
autocomplete="new-password"
|
||||
placeholder="New password"
|
||||
/>
|
||||
<InputError :message="errors.password" />
|
||||
</div>
|
||||
|
||||
<div class="grid gap-2">
|
||||
<Label for="password_confirmation"
|
||||
>Confirm password</Label
|
||||
>
|
||||
<PasswordInput
|
||||
id="password_confirmation"
|
||||
name="password_confirmation"
|
||||
class="mt-1 block w-full"
|
||||
autocomplete="new-password"
|
||||
placeholder="Confirm password"
|
||||
/>
|
||||
<InputError :message="errors.password_confirmation" />
|
||||
</div>
|
||||
|
||||
<div class="flex items-center gap-4">
|
||||
<Button
|
||||
:disabled="processing"
|
||||
data-test="update-password-button"
|
||||
>
|
||||
Save password
|
||||
</Button>
|
||||
|
||||
<Transition
|
||||
enter-active-class="transition ease-in-out"
|
||||
enter-from-class="opacity-0"
|
||||
leave-active-class="transition ease-in-out"
|
||||
leave-to-class="opacity-0"
|
||||
>
|
||||
<p
|
||||
v-show="recentlySuccessful"
|
||||
class="text-sm text-neutral-600"
|
||||
>
|
||||
Saved.
|
||||
</p>
|
||||
</Transition>
|
||||
</div>
|
||||
</Form>
|
||||
</div>
|
||||
|
||||
<div v-if="canManageTwoFactor" class="space-y-6">
|
||||
<Heading
|
||||
variant="small"
|
||||
title="Two-factor authentication"
|
||||
description="Manage your two-factor authentication settings"
|
||||
/>
|
||||
|
||||
<div
|
||||
v-if="!twoFactorEnabled"
|
||||
class="flex flex-col items-start justify-start space-y-4"
|
||||
>
|
||||
<p class="text-muted-foreground text-sm">
|
||||
When you enable two-factor authentication, you will be
|
||||
prompted for a secure pin during login. This pin can be
|
||||
retrieved from a TOTP-supported application on your
|
||||
phone.
|
||||
<Card class="gap-0 overflow-hidden rounded-xl py-0 shadow-none">
|
||||
<CardHeader class="gap-stack border-b p-5 sm:p-6">
|
||||
<h2 class="text-title">
|
||||
{{ t('security.passwordTitle') }}
|
||||
</h2>
|
||||
<p class="text-muted-foreground">
|
||||
{{ t('security.passwordDescription') }}
|
||||
</p>
|
||||
|
||||
<div>
|
||||
<Button
|
||||
v-if="hasSetupData"
|
||||
@click="showSetupModal = true"
|
||||
</CardHeader>
|
||||
<CardContent class="p-5 sm:p-6">
|
||||
<form
|
||||
class="gap-column grid"
|
||||
:aria-busy="passwordForm.processing"
|
||||
@submit.prevent="savePassword"
|
||||
>
|
||||
<AuthFormFeedback
|
||||
:state="passwordProtection.state.value"
|
||||
:response-status="
|
||||
passwordProtection.responseStatus.value
|
||||
"
|
||||
:loading-title="t('security.savingPassword')"
|
||||
:success-title="t('security.passwordSaved')"
|
||||
@retry="savePassword"
|
||||
/>
|
||||
<fieldset
|
||||
class="gap-column grid min-w-0"
|
||||
:disabled="passwordForm.processing"
|
||||
>
|
||||
<ShieldCheck />Continue setup
|
||||
</Button>
|
||||
<Form
|
||||
v-else
|
||||
v-bind="enable.form()"
|
||||
@success="showSetupModal = true"
|
||||
#default="{ processing }"
|
||||
>
|
||||
<Button type="submit" :disabled="processing">
|
||||
Enable 2FA
|
||||
</Button>
|
||||
</Form>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div
|
||||
v-else
|
||||
class="flex flex-col items-start justify-start space-y-4"
|
||||
>
|
||||
<p class="text-muted-foreground text-sm">
|
||||
You will be prompted for a secure, random pin during
|
||||
login, which you can retrieve from the TOTP-supported
|
||||
application on your phone.
|
||||
</p>
|
||||
|
||||
<div class="relative inline">
|
||||
<Form v-bind="disable.form()" #default="{ processing }">
|
||||
<legend class="sr-only">
|
||||
{{ t('security.passwordTitle') }}
|
||||
</legend>
|
||||
<div class="grid gap-2">
|
||||
<Label for="current_password">{{
|
||||
t('security.currentPassword')
|
||||
}}</Label>
|
||||
<PasswordInput
|
||||
id="current_password"
|
||||
v-model="passwordForm.current_password"
|
||||
name="current_password"
|
||||
required
|
||||
autocomplete="current-password"
|
||||
:disabled="passwordForm.processing"
|
||||
:aria-invalid="
|
||||
!!passwordForm.errors.current_password
|
||||
"
|
||||
aria-describedby="current-password-error"
|
||||
/>
|
||||
<InputError
|
||||
id="current-password-error"
|
||||
:message="
|
||||
passwordForm.errors.current_password
|
||||
"
|
||||
/>
|
||||
</div>
|
||||
<div class="grid gap-2">
|
||||
<Label for="password">{{
|
||||
t('security.newPassword')
|
||||
}}</Label>
|
||||
<PasswordInput
|
||||
id="password"
|
||||
v-model="passwordForm.password"
|
||||
name="password"
|
||||
required
|
||||
autocomplete="new-password"
|
||||
:disabled="passwordForm.processing"
|
||||
:aria-invalid="
|
||||
!!passwordForm.errors.password
|
||||
"
|
||||
aria-describedby="new-password-error"
|
||||
/>
|
||||
<InputError
|
||||
id="new-password-error"
|
||||
:message="passwordForm.errors.password"
|
||||
/>
|
||||
</div>
|
||||
<div class="grid gap-2">
|
||||
<Label for="password_confirmation">{{
|
||||
t('security.confirmPassword')
|
||||
}}</Label>
|
||||
<PasswordInput
|
||||
id="password_confirmation"
|
||||
v-model="passwordForm.password_confirmation"
|
||||
name="password_confirmation"
|
||||
required
|
||||
autocomplete="new-password"
|
||||
:disabled="passwordForm.processing"
|
||||
:aria-invalid="
|
||||
!!passwordForm.errors
|
||||
.password_confirmation
|
||||
"
|
||||
aria-describedby="password-confirmation-error"
|
||||
/>
|
||||
<InputError
|
||||
id="password-confirmation-error"
|
||||
:message="
|
||||
passwordForm.errors
|
||||
.password_confirmation
|
||||
"
|
||||
/>
|
||||
</div>
|
||||
<Button
|
||||
variant="destructive"
|
||||
type="submit"
|
||||
:disabled="processing"
|
||||
class="justify-self-start"
|
||||
:loading="passwordForm.processing"
|
||||
:loading-label="t('security.savingPassword')"
|
||||
data-test="update-password-button"
|
||||
>{{ t('security.savePassword') }}</Button
|
||||
>
|
||||
Disable 2FA
|
||||
</Button>
|
||||
</Form>
|
||||
</fieldset>
|
||||
</form>
|
||||
</CardContent>
|
||||
</Card>
|
||||
|
||||
<Card
|
||||
v-if="canManageTwoFactor"
|
||||
class="gap-0 overflow-hidden rounded-xl py-0 shadow-none"
|
||||
>
|
||||
<CardHeader class="gap-stack border-b p-5 sm:p-6">
|
||||
<div
|
||||
class="flex flex-wrap items-center justify-between gap-3"
|
||||
>
|
||||
<h2 class="text-title flex items-center gap-2">
|
||||
<ShieldCheck class="text-primary size-5" />{{
|
||||
t('security.twoFactorTitle')
|
||||
}}
|
||||
</h2>
|
||||
<span
|
||||
class="bg-muted rounded-full px-3 py-1 text-xs font-semibold"
|
||||
role="status"
|
||||
>{{
|
||||
t(
|
||||
props.twoFactorEnabled
|
||||
? 'security.enabled'
|
||||
: setupStarted
|
||||
? 'security.pending'
|
||||
: 'security.disabled',
|
||||
)
|
||||
}}</span
|
||||
>
|
||||
</div>
|
||||
|
||||
<TwoFactorRecoveryCodes />
|
||||
</div>
|
||||
|
||||
<TwoFactorSetupModal
|
||||
v-model:isOpen="showSetupModal"
|
||||
:requiresConfirmation="requiresConfirmation"
|
||||
:twoFactorEnabled="twoFactorEnabled"
|
||||
/>
|
||||
</div>
|
||||
<p class="text-muted-foreground">
|
||||
{{
|
||||
t(
|
||||
props.twoFactorEnabled
|
||||
? 'security.enabledDescription'
|
||||
: 'security.twoFactorDescription',
|
||||
)
|
||||
}}
|
||||
</p>
|
||||
</CardHeader>
|
||||
<CardContent class="gap-column grid p-5 sm:p-6">
|
||||
<AuthFormFeedback
|
||||
v-if="!showDisableDialog"
|
||||
:state="twoFactorProtection.state.value"
|
||||
:response-status="
|
||||
twoFactorProtection.responseStatus.value
|
||||
"
|
||||
@retry="
|
||||
props.twoFactorEnabled
|
||||
? (showDisableDialog = true)
|
||||
: startSetup()
|
||||
"
|
||||
/>
|
||||
<Button
|
||||
v-if="!twoFactorEnabled"
|
||||
class="justify-self-start"
|
||||
:loading="twoFactorForm.processing"
|
||||
@click="startSetup"
|
||||
>{{
|
||||
t(
|
||||
setupStarted
|
||||
? 'security.continueSetup'
|
||||
: 'security.enable',
|
||||
)
|
||||
}}</Button
|
||||
>
|
||||
<template v-else>
|
||||
<Button
|
||||
variant="outline"
|
||||
class="text-destructive justify-self-start"
|
||||
@click="showDisableDialog = true"
|
||||
>{{ t('security.disable') }}</Button
|
||||
>
|
||||
<TwoFactorRecoveryCodes />
|
||||
</template>
|
||||
</CardContent>
|
||||
</Card>
|
||||
<TwoFactorSetupModal
|
||||
v-if="canManageTwoFactor"
|
||||
v-model:is-open="showSetupModal"
|
||||
:requires-confirmation="requiresConfirmation"
|
||||
:two-factor-enabled="twoFactorEnabled"
|
||||
/>
|
||||
<Dialog
|
||||
:open="showDisableDialog"
|
||||
@update:open="updateDisableDialog"
|
||||
>
|
||||
<DialogContent
|
||||
:show-close-button="!twoFactorForm.processing"
|
||||
@escape-key-down="
|
||||
twoFactorForm.processing && $event.preventDefault()
|
||||
"
|
||||
@interact-outside="
|
||||
twoFactorForm.processing && $event.preventDefault()
|
||||
"
|
||||
>
|
||||
<DialogHeader>
|
||||
<DialogTitle>{{
|
||||
t('security.disableTitle')
|
||||
}}</DialogTitle>
|
||||
<DialogDescription>{{
|
||||
t('security.disableDescription')
|
||||
}}</DialogDescription>
|
||||
</DialogHeader>
|
||||
<AuthFormFeedback
|
||||
:state="twoFactorProtection.state.value"
|
||||
:response-status="
|
||||
twoFactorProtection.responseStatus.value
|
||||
"
|
||||
@retry="disableTwoFactor"
|
||||
/>
|
||||
<DialogFooter>
|
||||
<Button
|
||||
variant="outline"
|
||||
:disabled="twoFactorForm.processing"
|
||||
@click="updateDisableDialog(false)"
|
||||
>{{ t('common.cancel') }}</Button
|
||||
>
|
||||
<Button
|
||||
variant="destructive"
|
||||
:loading="twoFactorForm.processing"
|
||||
@click="disableTwoFactor"
|
||||
>{{ t('security.disable') }}</Button
|
||||
>
|
||||
</DialogFooter>
|
||||
</DialogContent>
|
||||
</Dialog>
|
||||
</SettingsLayout>
|
||||
</AppLayout>
|
||||
</template>
|
||||
|
||||
Reference in New Issue
Block a user