- 优化双因素认证流程

This commit is contained in:
dushixiang
2021-01-24 17:16:33 +08:00
parent 53e4048944
commit 7c4860ce28
5 changed files with 138 additions and 24 deletions

View File

@ -1,9 +1,10 @@
import React, {Component} from 'react';
import {Button, Card, Form, Image, Input, Layout, PageHeader} from "antd";
import {Button, Card, Form, Image, Input, Layout, Modal, PageHeader, Result, Space} from "antd";
import {itemRender} from '../../utils/utils'
import request from "../../common/request";
import {message} from "antd/es";
import Logout from "./Logout";
import {ExclamationCircleOutlined, ReloadOutlined} from "@ant-design/icons";
const {Content} = Layout;
const {Meta} = Card;
@ -27,13 +28,34 @@ const formTailLayout = {
labelCol: {span: 3},
wrapperCol: {span: 6, offset: 3},
};
const {confirm} = Modal;
class Info extends Component {
state = {}
state = {
user: {
enableTotp: false
}
}
passwordFormRef = React.createRef();
componentDidMount() {
this.loadInfo();
}
loadInfo = async () => {
let result = await request.get('/info');
if (result['code'] === 1) {
this.setState({
user: result['data']
})
sessionStorage.setItem('user', JSON.stringify(result['data']));
} else {
message.error(result['message']);
}
}
onNewPasswordChange(value) {
this.setState({
'newPassword': value.target.value
@ -75,6 +97,7 @@ class Info extends Component {
let result = await request.post('/confirm-totp', values);
if (result.code === 1) {
message.success('TOTP启用成功');
await this.loadInfo();
this.setState({
qr: "",
secret: ""
@ -85,7 +108,7 @@ class Info extends Component {
}
resetTOTP = async () => {
let result = await request.post('/reset-totp');
let result = await request.get('/reload-totp');
if (result.code === 1) {
this.setState({
qr: result.data.qr,
@ -167,33 +190,93 @@ class Info extends Component {
</Content>
<Content className="site-layout-background page-content">
<h1>双因素认证</h1>
<Form hidden={this.state.qr} onFinish={this.resetTOTP}>
<Form.Item {...formTailLayout}>
<Button type="primary" htmlType="submit">
重置 TOTP
</Button>
<Form hidden={this.state.qr}>
<Form.Item>
{
this.state.user.enableTotp ?
<Result
status="success"
title="您已成功开启双因素认证!"
subTitle="多因素认证-MFA二次认证-登录身份鉴别,访问控制更安全。"
extra={[
<Button type="primary" key="console" danger onClick={() => {
confirm({
title: '您确认要解除双因素认证吗?',
icon: <ExclamationCircleOutlined/>,
content: '解除之后可能存在系统账号被暴力破解的风险。',
okText: '确认',
okType: 'danger',
cancelText: '取消',
onOk: async () => {
let result = await request.post('/reset-totp');
if (result.code === 1) {
message.success('双因素认证解除成功');
await this.loadInfo();
} else {
message.error(result.message);
}
},
onCancel() {
console.log('Cancel');
},
})
}}>
解除绑定
</Button>,
<Button key="re-bind" onClick={this.resetTOTP}>重新绑定</Button>,
]}
/> :
<Result
status="warning"
title="您还未开启双因素认证!"
subTitle="系统账号存在被暴力破解的风险。"
extra={
<Button type="primary" key="bind" onClick={this.resetTOTP}>
去开启
</Button>
}
/>
}
</Form.Item>
</Form>
<Form hidden={!this.state.qr} onFinish={this.confirmTOTP}>
<Form.Item {...formItemLayout} label="二维码">
<Space size={12}>
<Card
hoverable
style={{width: 280}}
cover={<Image
style={{margin: 40, marginBottom: 20}}
width={200}
src={"data:image/png;base64, " + this.state.qr}
/>}
>
<Meta title="双因素认证二维码" description="有效期30秒在扫描后请尽快输入。"/>
</Card>
<Card
hoverable
style={{width: 280}}
cover={<Image
style={{margin: 40, marginBottom: 20}}
width={200}
src={"data:image/png;base64, " + this.state.qr}
/>
}
>
<Meta title="双因素认证二维码"
description="有效期30秒在扫描后请尽快输入。推荐使用Google Authenticator, Authy 或者 Microsoft Authenticator。"/>
</Card>
<Button
type="primary"
icon={<ReloadOutlined/>}
onClick={this.resetTOTP}
>
重新加载
</Button>
</Space>
</Form.Item>
<Form.Item
{...formItemLayout}
name="totp"
label="TOTP"
rules={[]}
rules={[
{
required: true,
message: '请输入双因素认证APP中显示的授权码',
},
]}
>
<Input placeholder="请输入双因素认证APP中显示的授权码"/>
</Form.Item>