109638656: Implement two factor verify flow

When user enters valid sms code they are redirected to the dashboard.
Otherwise, form errors are present.
This commit is contained in:
Rebecca Law
2015-12-08 12:36:54 +00:00
parent c946f85f9d
commit 2e59870490
6 changed files with 63 additions and 17 deletions

View File

@@ -44,6 +44,14 @@ class RegisterUserForm(Form):
class TwoFactorForm(Form):
sms_code = IntegerField('sms code', validators=[DataRequired(message='Please enter your code')])
def validate_sms_code(self, a):
if self.sms_code.data is not None:
if checkpw(str(self.sms_code.data), session['sms_code']) is False:
self.sms_code.errors.append('Code does not match')
return False
else:
return True
class VerifyForm(Form):
sms_code = StringField("Text message confirmation code",

View File

@@ -27,4 +27,4 @@ def send_email_code(email):
except:
raise AdminApiClientException('Exception when sending email.')
return email_code
return email_code

View File

@@ -43,6 +43,3 @@ def process_register():
else:
return jsonify(form.errors), 400
return redirect('/verify')

View File

@@ -1,7 +1,8 @@
from flask import render_template, redirect, jsonify
from flask import render_template, redirect, jsonify, session
from flask_login import login_user
from app.main import main
from app.main.dao import users_dao
from app.main.forms import TwoFactorForm
@@ -15,6 +16,8 @@ def process_two_factor():
form = TwoFactorForm()
if form.validate_on_submit():
user = users_dao.get_user_by_id(session['user_id'])
login_user(user)
return redirect('/dashboard')
else:

View File

@@ -12,15 +12,18 @@ GOV.UK Notify | Text verification
<p>We've sent you a text message with a verification code.</p>
<p>
<label class="form-label" for="email">Enter verification code<br>
<input class="form-control-1-4" id="email" type="text"><br>
<span class="font-xsmall"><a href="verification-not-received">I haven't received a text</a></span>
</p>
<p>
<a class="button" href="dashboard" role="button">Continue</a>
</p>
<form autocomplete="off" action="" method="post">
{{ form.hidden_tag() }}
<p>
<label class="form-label">Enter verification code</label><br>
{{ form.sms_code(class="form-control-1-4", autocomplete="off") }} <br>
<span class="font-xsmall"><a href="verification-not-received">I haven't received a text</a></span>
</p>
<p>
<button class="button" href="dashboard" role="button">Continue</button>
</p>
</form>
</div>
</div>