2
0
mirror of https://github.com/inventree/InvenTree.git synced 2026-04-10 21:40:56 +00:00

fix: MFA enforce flows / interactions (#10796)

* Add a explicit confirm when MFA Enforcing is turned on

https://github.com/inventree/InvenTree/issues/10754

* add error boundary for the case of a login enforcement

* ensure registration setup is redirected to

* fix auth url

* adjust error boundary

* update test

* be more specific in enforcement flow

* ensure we log the admin also out immidiatly after removing all mfa

* small cleanup

* sml chg

* fix execution order issues

* clean up args

* cleanup

* add test for mfa change logout

* fix IP in test

* add option to require an explicit confirm

* adapt ui to ask before patching

* bump API version
This commit is contained in:
Matthias Mair
2026-01-15 23:33:10 +01:00
committed by GitHub
parent 07e1a72261
commit 9fa40ae572
16 changed files with 250 additions and 64 deletions

View File

@@ -20,6 +20,7 @@ export enum ApiEndpoints {
user_simple_login = 'email/generate/',
// User auth endpoints
auth_base = '/auth/',
user_reset = 'auth/v1/auth/password/request',
user_reset_set = 'auth/v1/auth/password/reset',
auth_pwd_change = 'auth/v1/account/password/change',

View File

@@ -25,7 +25,8 @@ export enum FlowEnum {
MfaAuthenticate = 'mfa_authenticate',
Reauthenticate = 'reauthenticate',
MfaReauthenticate = 'mfa_reauthenticate',
MfaTrust = 'mfa_trust'
MfaTrust = 'mfa_trust',
MfaRegister = 'mfa_register'
}
export interface Flow {

View File

@@ -34,6 +34,8 @@ export interface Setting {
method?: string;
required?: boolean;
read_only?: boolean;
confirm?: boolean;
confirm_text?: string;
}
export interface SettingChoice {