OTP security hardened
This commit is contained in:
@@ -108,13 +108,19 @@
|
||||
<label>Verification code <input id="otp-setup-code" inputmode="numeric"
|
||||
autocomplete="one-time-code" /></label>
|
||||
<button id="otp-enable" type="button">Enable one-time password</button>
|
||||
<p>Save these recovery codes in a secure place. They are shown only once:</p>
|
||||
<code id="otp-recovery-codes"></code>
|
||||
</div>
|
||||
</div>
|
||||
<div id="otp-enabled" class="hidden">
|
||||
<p>One-time password is enabled.</p>
|
||||
<label>Current password <input id="otp-current-password" type="password" autocomplete="current-password" /></label>
|
||||
<label>Verification code <input id="otp-disable-code" inputmode="numeric"
|
||||
autocomplete="one-time-code" /></label>
|
||||
<button id="otp-disable" type="button">Disable one-time password</button>
|
||||
<p>Lost access to your authenticator? Use a saved recovery code.</p>
|
||||
<label>Recovery code <input id="otp-recovery-code" type="text" autocomplete="one-time-code" /></label>
|
||||
<button id="otp-recover" type="button">Recover and disable one-time password</button>
|
||||
</div>
|
||||
<p id="otp-status" class="status" role="status"></p>
|
||||
</section>
|
||||
|
||||
Reference in New Issue
Block a user