From fefec929c59c72dc93e4be30e8f23cd8c5258b0a Mon Sep 17 00:00:00 2001 From: erdgeist Date: Fri, 24 Jul 2026 13:52:56 +0200 Subject: Add self-service TOTP enrollment UI and witnessed admin reset --- app/controllers/users_controller.rb | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) (limited to 'app/controllers/users_controller.rb') diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb index 6572b7a2..08541b0c 100644 --- a/app/controllers/users_controller.rb +++ b/app/controllers/users_controller.rb @@ -3,7 +3,7 @@ class UsersController < ApplicationController # Private before_action :login_required - before_action :find_user, :only => [:show, :edit, :update, :destroy] + before_action :find_user, :only => [:show, :edit, :update, :destroy, :reset_otp] before_action :verify_status, :except => [:index, :show] layout 'admin' @@ -52,6 +52,13 @@ class UsersController < ApplicationController redirect_to users_path end + def reset_otp + return deny_user_access unless current_user.admin? + @user.disable_otp!(:actor => current_user) + flash[:notice] = "Second factor reset for #{@user.login}" + redirect_to edit_user_path(@user) + end + private def user_params -- cgit v1.3