mirror of
https://github.com/lingble/chatwoot.git
synced 2025-11-19 12:35:06 +00:00
## Linear: - https://github.com/chatwoot/chatwoot/issues/486 ## Description This PR implements Multi-Factor Authentication (MFA) support for user accounts, enhancing security by requiring a second form of verification during login. The feature adds TOTP (Time-based One-Time Password) authentication with QR code generation and backup codes for account recovery. ## Type of change - [ ] New feature (non-breaking change which adds functionality) ## How Has This Been Tested? - Added comprehensive RSpec tests for MFA controller functionality - Tested MFA setup flow with QR code generation - Verified OTP validation and backup code generation - Tested login flow with MFA enabled/disabled ## Checklist: - [ ] My code follows the style guidelines of this project - [ ] I have performed a self-review of my code - [ ] I have commented on my code, particularly in hard-to-understand areas - [ ] I have made corresponding changes to the documentation - [ ] My changes generate no new warnings - [ ] I have added tests that prove my fix is effective or that my feature works - [ ] New and existing unit tests pass locally with my changes - [ ] Any dependent changes have been merged and published in downstream modules --------- Co-authored-by: Pranav <pranav@chatwoot.com> Co-authored-by: Sojan Jose <sojan@pepalo.com> Co-authored-by: Muhsin Keloth <muhsinkeramam@gmail.com>
28 lines
568 B
Ruby
28 lines
568 B
Ruby
class Widget::TokenService < BaseTokenService
|
|
DEFAULT_EXPIRY_DAYS = 180
|
|
|
|
def generate_token
|
|
JWT.encode(token_payload, secret_key, algorithm)
|
|
end
|
|
|
|
private
|
|
|
|
def token_payload
|
|
(payload || {}).merge(exp: exp, iat: iat)
|
|
end
|
|
|
|
def iat
|
|
Time.zone.now.to_i
|
|
end
|
|
|
|
def exp
|
|
iat + expire_in.days.to_i
|
|
end
|
|
|
|
def expire_in
|
|
# Value is stored in days, defaulting to 6 months (180 days)
|
|
token_expiry_value = InstallationConfig.find_by(name: 'WIDGET_TOKEN_EXPIRY')&.value
|
|
(token_expiry_value.presence || DEFAULT_EXPIRY_DAYS).to_i
|
|
end
|
|
end
|