add 'Global TOTP Before Authentication' option and update form layouts

This commit is contained in:
Eduardo Silva
2026-03-14 08:52:31 -03:00
parent 72e3e2e1ca
commit 06426b3852
4 changed files with 55 additions and 30 deletions

View File

@@ -173,13 +173,17 @@ def view_manage_auth_method(request):
form_description = {
'size': '',
'content': _('''
<h5>Authentication Types</h5>
<h4>Authentication Types</h4>
<p>Select how users will authenticate through this method.</p>
<ul>
<li><strong>Local Password</strong>: Users will authenticate using a standard username and password stored locally. Only one of this type can be created.</li>
<li><strong>TOTP (Time-Based One-Time Password)</strong>: Users will need to enter a rotating token from an authenticator app. Requires setting a Global TOTP Secret.</li>
<li><strong>OIDC (OpenID Connect)</strong>: Users will authenticate via an external identity provider (like Keycloak, Google, or Authelia). Requires Provider URL, Client ID, and Client Secret.</li>
</ul>
<h5>Local Password</h5>
<p>Users will authenticate using a standard username and password stored locally. Only one of this type can be created.</p>
<h5>OIDC (OpenID Connect)</h5>
<p>Users will authenticate via an external identity provider (like Keycloak, Google, or Authelia). Requires Provider URL, Client ID, and Client Secret.</p>
<h5>TOTP (Time-Based One-Time Password)</h5>
<p>Users will need to enter a rotating token from an authenticator app. Requires setting a Global TOTP Secret. <br>If <strong>Global TOTP Before Authentication</strong> is enabled, the PIN is required before the username and password to help combat bruteforce attacks.</p>
''')
}