Start to work on 2FA

templates/settings/add_2fa_totp_page.html

@@ -0,0 +1,6 @@
+{% extends "base_settings_page.html" %}
+{% block content %}
+
+TODO : show a form to add a new TOTP password
+
+{% endblock content %}

templates/settings/base_settings_page.html

@@ -26,6 +26,11 @@
                 Change password
             </a>
         </li>
+        <li>
+            <a href="/settings/two_factors" class="nav-link link-dark">
+                Two-factor authentication
+            </a>
+        </li>
 
         {% if _p.is_admin %}
         <hr/>

templates/settings/two_factors_page.html

@@ -0,0 +1,18 @@
+{% extends "base_settings_page.html" %}
+{% block content %}
+
+
+<div class="alert alert-dismissible alert-warning">
+    <h4 class="alert-heading">Warning!</h4>
+    <p class="mb-0">Once a new factor has been added to your account, you can not access
+        your account anymore using only your password. If you remove all your second factors,
+        2 Factor Authentication is automatically disabled for your account.</p>
+</div>
+
+
+<p>
+    <a href="/settings/two_factors/add_totp" type="button" class="btn btn-primary">Add One Time Password (OTP) factor</a>
+</p>
+TODO : show the list of currently registered 2 factors methods
+
+{% endblock content %}