jezcaudle/opensmtpd_rails_frontend
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Getting there with Devise MFA

Browse Source
This commit is contained in:
Jez Caudle
2024-05-21 10:13:05 +01:00
parent 32a06d8c61
commit 95675aa5ef
10 changed files with 34 additions and 75 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
config/initializers/devise.rb
View File

@@ -9,6 +9,10 @@
# Use this hook to configure devise mailer, warden hooks and so forth.
# Many of these configuration options can be set straight in your model.
Devise.setup do |config|
config.warden do |manager|
manager.default_strategies(:scope => :user).unshift :two_factor_authenticatable
end
# The secret key used by Devise. Devise uses this key to generate
# random tokens. Changing this key will render invalid all existing
# confirmation, reset password and unlock tokens in the database.

35
config/initializers/webauthn.rb
View File

@@ -1,35 +0,0 @@
WebAuthn.configure do |config|
# This value needs to match `window.location.origin` evaluated by
# the User Agent during registration and authentication ceremonies.
config.origin = "https://mailadmin.hiddenagenda.ltd.uk"
# Relying Party name for display purposes
config.rp_name = "Hidden Agenda Ltd"
# Optionally configure a client timeout hint, in milliseconds.
# This hint specifies how long the browser should wait for any
# interaction with the user.
# This hint may be overridden by the browser.
# https://www.w3.org/TR/webauthn/#dom-publickeycredentialcreationoptions-timeout
# config.credential_options_timeout = 120_000
# You can optionally specify a different Relying Party ID
# (https://www.w3.org/TR/webauthn/#relying-party-identifier)
# if it differs from the default one.
#
# In this case the default would be "auth.example.com", but you can set it to
# the suffix "example.com"
#
# config.rp_id = "example.com"
# Configure preferred binary-to-text encoding scheme. This should match the encoding scheme
# used in your client-side (user agent) code before sending the credential to the server.
# Supported values: `:base64url` (default), `:base64` or `false` to disable all encoding.
#
# config.encoding = :base64url
# Possible values: "ES256", "ES384", "ES512", "PS256", "PS384", "PS512", "RS256", "RS384", "RS512", "RS1"
# Default: ["ES256", "PS256", "RS256"]
#
# config.algorithms << "ES384"
end