mirror of
https://github.com/discourse/discourse.git
synced 2025-06-18 04:42:30 +08:00
3106c30f16
Added button to remove password from account if user has a linked external account or passkey The button only displays if the user has at least one associated account or a passkey set up. Uses the ConfirmSession dialog in addition to a warning about deleting the password. Users can still reset their password via the Reset Password button (which will now display "Set Password" if they've removed it). Also prevent user from removing their last remaining associated account or passkey if they have no password set. Replaces PR #31489 from my personal repo, with some fixes for conflicts since then.
59 lines
1.8 KiB
Ruby
59 lines
1.8 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class UserSecurityKey < ActiveRecord::Base
|
|
belongs_to :user
|
|
MAX_KEYS_PER_USER = 50
|
|
MAX_NAME_LENGTH = 300
|
|
|
|
scope :second_factors,
|
|
-> { where(factor_type: UserSecurityKey.factor_types[:second_factor], enabled: true) }
|
|
|
|
validates :name, length: { maximum: MAX_NAME_LENGTH }, if: :name_changed?
|
|
validate :count_per_user_does_not_exceed_limit, on: :create
|
|
|
|
def self.factor_types
|
|
@factor_types ||= Enum.new(second_factor: 0, first_factor: 1, multi_factor: 2)
|
|
end
|
|
|
|
def first_factor?
|
|
factor_type == self.class.factor_types[:first_factor]
|
|
end
|
|
|
|
private
|
|
|
|
def count_per_user_does_not_exceed_limit
|
|
if UserSecurityKey.where(user_id: self.user_id).count >= MAX_KEYS_PER_USER
|
|
errors.add(:base, I18n.t("login.too_many_security_keys"))
|
|
end
|
|
end
|
|
end
|
|
|
|
# == Schema Information
|
|
#
|
|
# Table name: user_security_keys
|
|
#
|
|
# id :bigint not null, primary key
|
|
# user_id :bigint not null
|
|
# credential_id :string not null
|
|
# public_key :string not null
|
|
# factor_type :integer default(0), not null
|
|
# enabled :boolean default(TRUE), not null
|
|
# name :string(300) not null
|
|
# last_used :datetime
|
|
# created_at :datetime not null
|
|
# updated_at :datetime not null
|
|
#
|
|
# Indexes
|
|
#
|
|
# index_user_security_keys_on_credential_id (credential_id) UNIQUE
|
|
# index_user_security_keys_on_factor_type (factor_type)
|
|
# index_user_security_keys_on_factor_type_and_enabled (factor_type,enabled)
|
|
# index_user_security_keys_on_last_used (last_used)
|
|
# index_user_security_keys_on_public_key (public_key)
|
|
# index_user_security_keys_on_user_id (user_id)
|
|
#
|
|
# Foreign Keys
|
|
#
|
|
# fk_rails_... (user_id => users.id)
|
|
#
|