OTP : Improve : tighten the security + cosmetic

set double authentication : create, send link, usable with
FreeOTP (opensource) AEgis (opensource) and Google Authenticator

1. OTP : prevent direct access without going throught the 2FA mechanism
2. Go back to the url where you were disconnected
3. Cosmetic
This commit is contained in:
sparkyx 2025-08-03 20:21:39 +02:00
parent bf503299c3
commit 0aa9c4ed28
32 changed files with 1904 additions and 276 deletions

View file

@ -96,6 +96,13 @@ if ( DEBUGNOALYSS > 1 ) {
$g_parameter=new Noalyss_Parameter_Folder($cn);
$g_user->Check();
if ( ! $g_user->is_double_identified()) {
echo "<h2>"._('Vous êtes déconnecté')."</h2>";
$backurl=$_SERVER['REQUEST_URI'];
$url="index.php?".http_build_query(array('reconnect'=>1,'backurl'=>urlencode($backurl)));
redirect($url);
exit();
}
$g_user->check_dossier(Dossier::id());
load_all_script();
/* Check Browser version if < IE6 then unsupported */