214 lines
9.6 KiB
PHP
214 lines
9.6 KiB
PHP
{{-- Copyright (c) 2015 - 2016 Dane Everitt <dane@daneeveritt.com> --}}
|
|
|
|
{{-- Permission is hereby granted, free of charge, to any person obtaining a copy --}}
|
|
{{-- of this software and associated documentation files (the "Software"), to deal --}}
|
|
{{-- in the Software without restriction, including without limitation the rights --}}
|
|
{{-- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell --}}
|
|
{{-- copies of the Software, and to permit persons to whom the Software is --}}
|
|
{{-- furnished to do so, subject to the following conditions: --}}
|
|
|
|
{{-- The above copyright notice and this permission notice shall be included in all --}}
|
|
{{-- copies or substantial portions of the Software. --}}
|
|
|
|
{{-- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR --}}
|
|
{{-- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, --}}
|
|
{{-- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE --}}
|
|
{{-- AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER --}}
|
|
{{-- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, --}}
|
|
{{-- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE --}}
|
|
{{-- SOFTWARE. --}}
|
|
@extends('layouts.master')
|
|
|
|
@section('title', 'Account Security')
|
|
|
|
@section('sidebar-server')
|
|
@endsection
|
|
|
|
@section('content')
|
|
<div class="col-md-12">
|
|
@foreach (Alert::getMessages() as $type => $messages)
|
|
@foreach ($messages as $message)
|
|
<div class="alert alert-{{ $type }} alert-dismissable" role="alert">
|
|
<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span></button>
|
|
{{ $message }}
|
|
</div>
|
|
@endforeach
|
|
@endforeach
|
|
<h3 style="margin-top:0;">Active Sessions</h3><hr />
|
|
<table class="table table-bordered table-hover" style="margin-bottom:0;">
|
|
<thead>
|
|
<tr>
|
|
<th>Session ID</th>
|
|
<th>IP Address</th>
|
|
<th>User Agent</th>
|
|
<th>Last Location</th>
|
|
<th>Last Activity</th>
|
|
<th></th>
|
|
</th>
|
|
</thead>
|
|
<tbody>
|
|
@foreach($sessions as $session)
|
|
<tr>
|
|
<?php $prev = unserialize(base64_decode($session->payload)) ?>
|
|
<td><code>{{ substr($session->id, 0, 8) }}</code></td>
|
|
<td>{{ $session->ip_address }}</td>
|
|
<td><small>{{ $session->user_agent }}</small></td>
|
|
<td>
|
|
@if(isset($prev['_previous']['url']))
|
|
{{ str_replace(env('APP_URL'), '', $prev['_previous']['url']) }}
|
|
@else
|
|
<em>unknwon</em>
|
|
@endif
|
|
</td>
|
|
<td>
|
|
@if((time() - $session->last_activity < 10))
|
|
<em>just now</em>
|
|
@else
|
|
{{ date('D, M j \a\t H:i:s', $session->last_activity) }}
|
|
@endif
|
|
</td>
|
|
<td><a href="{{ route('account.security.revoke', $session->id) }}"><i class="fa fa-trash-o"></i></a></td>
|
|
</tr>
|
|
@endforeach
|
|
</tbody>
|
|
</table>
|
|
|
|
<h3>{{ trans('base.account.totp_header') }} <small>@if (Auth::user()->use_totp === 1){{ trans('strings.enabled') }}@else{{ trans('strings.disabled') }}@endif</small></h3><hr />
|
|
@if (Auth::user()->use_totp === 1)
|
|
<div class="panel panel-default">
|
|
<div class="panel-heading">{{ trans('base.account.totp_disable') }}</div>
|
|
<div class="panel-body">
|
|
<p>{{ trans('base.account.totp_disable_help') }}</p>
|
|
<br />
|
|
<form action="/account/totp" method="post">
|
|
<div class="form-group">
|
|
<div class="input-group">
|
|
<span class="input-group-addon">{{ trans('base.account.totp_token') }}</span>
|
|
<input type="text" name="token" class="form-control">
|
|
<span class="input-group-btn">
|
|
{!! csrf_field() !!}
|
|
{{ method_field('DELETE') }}
|
|
<button class="btn btn-danger btn-sm" type="submit">{{ trans('base.account.totp_disable') }}</button>
|
|
</span>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
@else
|
|
<div class="panel panel-info">
|
|
<div class="panel-heading">
|
|
<h3 class="panel-title">{{ trans('base.account.totp_header') }}</h3>
|
|
</div>
|
|
<div class="panel-body">
|
|
<p>{{ trans('base.account.totp_enable_help') }}</p>
|
|
<div class="alert alert-info" style="margin-bottom: 0;">{{ trans('base.account.totp_apps') }}</div>
|
|
</div>
|
|
</div>
|
|
<form action="#" id="do_totp" method="post">
|
|
<div class="form-group">
|
|
<div>
|
|
{!! csrf_field() !!}
|
|
<input type="submit" id="enable_totp" class="btn btn-success btn-sm" name="enable_totp" value="{{ trans('base.account.totp_enable') }}" />
|
|
</div>
|
|
</div>
|
|
</form>
|
|
@endif
|
|
<div class="modal fade" id="openTOTP" tabindex="-1" role="dialog" aria-labelledby="openTOTP" aria-hidden="true">
|
|
<div class="modal-dialog">
|
|
<div class="modal-content">
|
|
<form action="#" method="post" id="totp_token_verify">
|
|
<div class="modal-header">
|
|
<h4 class="modal-title">{{ trans('base.account.totp_qr') }}</h4>
|
|
</div>
|
|
<div class="modal-body" id="modal_insert_content">
|
|
<div class="row">
|
|
<div class="col-md-12" id="notice_box_totp" style="display:none;"></div>
|
|
</div>
|
|
<div class="row">
|
|
<div class="col-md-6">
|
|
<center><span id="hide_img_load"><i class="fa fa-spinner fa-spin"></i> Loading QR Code...</span><img src="" id="qr_image_insert" style="display:none;"/><br /><code id="totp_secret_insert"></code></center>
|
|
</div>
|
|
<div class="col-md-6">
|
|
<div class="alert alert-info">{{ trans('base.account.totp_checkpoint_help') }}</div>
|
|
<div class="form-group">
|
|
<label class="control-label" for="totp_token">TOTP Token</label>
|
|
{!! csrf_field() !!}
|
|
<input class="form-control" type="text" id="totp_token" />
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="submit" class="btn btn-primary btn-sm" id="submit_action">{{ trans('strings.submit') }}</button>
|
|
<button type="button" class="btn btn-default btn-sm" data-dismiss="modal" id="close_reload">{{ trans('strings.close') }}</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
</div>
|
|
<script>
|
|
$(document).ready(function () {
|
|
$('#sidebar_links').find('a[href=\'/account/security\']').addClass('active');
|
|
|
|
$('#close_reload').click(function () {
|
|
location.reload();
|
|
});
|
|
|
|
$('#do_totp').submit(function (event) {
|
|
|
|
event.preventDefault();
|
|
|
|
$.ajax({
|
|
type: 'PUT',
|
|
url: '/account/totp',
|
|
headers: { 'X-CSRF-Token': '{{ csrf_token() }}' }
|
|
}).done(function (data) {
|
|
var image = new Image();
|
|
image.src = data.qrImage;
|
|
$(image).load(function () {
|
|
$('#hide_img_load').slideUp(function () {
|
|
$('#qr_image_insert').attr('src', image.src).slideDown();
|
|
});
|
|
});
|
|
$('#totp_secret_insert').html(data.secret);
|
|
$('#openTOTP').modal('show');
|
|
}).fail(function (jqXHR) {
|
|
alert('An error occured while attempting to perform this action. Please try again.');
|
|
console.log(jqXHR);
|
|
});
|
|
|
|
});
|
|
$('#totp_token_verify').submit(function (event) {
|
|
|
|
event.preventDefault();
|
|
$('#submit_action').html('<i class="fa fa-spinner fa-spin"></i> {{ trans('strings.submit') }}').addClass('disabled');
|
|
|
|
$.ajax({
|
|
type: 'POST',
|
|
url:'/account/totp',
|
|
headers: { 'X-CSRF-Token': '{{ csrf_token() }}' },
|
|
data: {
|
|
token: $('#totp_token').val()
|
|
}
|
|
}).done(function (data) {
|
|
$('#notice_box_totp').hide();
|
|
if (data === 'true') {
|
|
$('#notice_box_totp').html('<div class="alert alert-success">{{ trans('base.account.totp_enabled') }}</div>').slideDown();
|
|
} else {
|
|
$('#notice_box_totp').html('<div class="alert alert-danger">{{ trans('base.account.totp_enabled_error') }}</div>').slideDown();
|
|
}
|
|
}).fail(function (jqXHR) {
|
|
alert('An error occured while attempting to perform this action. Please try again.');
|
|
console.log(jqXHR);
|
|
}).always(function () {
|
|
$('#submit_action').html('{{ trans('strings.submit') }}').removeClass('disabled');
|
|
});
|
|
|
|
});
|
|
});
|
|
</script>
|
|
@endsection
|