feat: Add WebAuthn (#38)

djoamersfoort · Dec 9, 2023 · ff9faa3 · ff9faa3
1 parent 5de80ad
commit ff9faa3
Show file tree

Hide file tree

Showing 4 changed files with 11 additions and 0 deletions.
diff --git a/LedenAdministratie/settings.py.example b/LedenAdministratie/settings.py.example
@@ -15,6 +15,9 @@ DEBUG = True
 
 ALLOWED_HOSTS = []
 
+# Required in production for WebAuthn
+# SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
+
 
 # Application definition
 
@@ -35,6 +38,7 @@ INSTALLED_APPS = [
     'django_otp.plugins.otp_static',
     'django_otp.plugins.otp_totp',
     'two_factor',
+    'two_factor.plugins.webauthn',
     'LedenAdministratie'
 ]
 
@@ -99,6 +103,7 @@ LOGIN_URL = 'two_factor:login'
 LOGIN_REDIRECT_URL = '/logged_in/'
 
 TWO_FACTOR_REMEMBER_COOKIE_AGE = 30 * 24 * 3600
+TWO_FACTOR_WEBAUTHN_RP_NAME = 'DJO Amersfoort'
 
 EMAIL_HOST="smtp.provider.com"
 EMAIL_PORT=587

diff --git a/requirements.txt b/requirements.txt
@@ -12,3 +12,4 @@ requests==2.31.0
 requests-oauthlib==1.3.1
 weasyprint==58.1
 django-two-factor-auth[phonenumberslite]==1.15.1
+django-two-factor-auth[webauthn]
diff --git a/templates/registration/base.html b/templates/registration/base.html
@@ -19,6 +19,7 @@
     <script src="{% static 'js/theme.js' %}"></script>
     {% block customscript %}{% endblock %}
     {% block head %}{% endblock %}
+    {% block extra_media %}{% endblock %}
 </head>
 
 <body>

diff --git a/templates/two_factor/core/login.html b/templates/two_factor/core/login.html
@@ -4,6 +4,10 @@
 {% load widget_tweaks %}
 {% load two_factor_tags %}
 
+{% block extra_media %}
+  {{ form.media }}
+{% endblock %}
+
 {% block head %}
 <div class="loader">
     <div class="spinner-border" role="status">