Prototype: OTP auth, styleguide overhaul, login/session rework

Replace password reset with email OTP verification flow.
Add auth_otp module, OTP templates, and email delivery.
Expand styleguide CSS with full component library.
Rework login, register, and admin views for cookie sessions.
Remove legacy 2FA templates and password reset flow.
Update SSH wrappers, forms, validators, and middleware.
This commit is contained in:
russell@unturf.com 2026-03-04 16:44:40 -05:00
parent 1dac65fc8a
commit 722c3bd369
38 changed files with 4100 additions and 1835 deletions

View file

@ -149,7 +149,7 @@ app.base_url = http://rhodecode.local
app.service_api.host = http://rhodecode.local:10020
; Secret for Service API authentication.
app.service_api.token =
app.service_api.token = oFK71R0pWjdtSukV0ajcnfVxe4j2ExWc7otEKvRPaks
; Unique application ID. Should be a random unique string for security.
app_instance_uuid = rc-production
@ -254,7 +254,7 @@ auth_ret_code_detection = false
lock_ret_code = 423
; Filesystem location were repositories should be stored
repo_store.path = /var/opt/rhodecode_repo_store
repo_store.path = /home/fox/git/rhodecode-enterprise-ce/.dev/repo_store
; allows to setup custom hooks in settings page
allow_custom_hooks_settings = true
@ -309,7 +309,7 @@ labs_settings_active = true
; NOTE: this setting IS DEPRECATED:
; file_store.storage_path = X -> use `file_store.filesystem_v2.storage_path = X` instead
; path to store the uploaded binaries and artifacts
#file_store.storage_path = /var/opt/rhodecode_data/file_store
#file_store.storage_path = /home/fox/git/rhodecode-enterprise-ce/.dev/data/file_store
; Artifacts file-store, is used to store comment attachments and artifacts uploads.
; file_store backend type: filesystem_v1, filesystem_v2 or objectstore (s3-based) are available as options
@ -319,10 +319,10 @@ labs_settings_active = true
#file_store.backend.type = filesystem_v2
; filesystem options...
#file_store.filesystem_v1.storage_path = /var/opt/rhodecode_data/artifacts_file_store
#file_store.filesystem_v1.storage_path = /home/fox/git/rhodecode-enterprise-ce/.dev/data/artifacts_file_store
; filesystem_v2 options...
#file_store.filesystem_v2.storage_path = /var/opt/rhodecode_data/artifacts_file_store
#file_store.filesystem_v2.storage_path = /home/fox/git/rhodecode-enterprise-ce/.dev/data/artifacts_file_store
#file_store.filesystem_v2.shards = 8
; objectstore options...
@ -389,7 +389,7 @@ archive_cache.objectstore.retry_attempts = 10
; and served from the cache during subsequent requests for the same archive of
; the repository. This path is important to be shared across filesystems and with
; RhodeCode and vcsserver
archive_cache.filesystem.store_dir = /var/opt/rhodecode_data/archive_cache
archive_cache.filesystem.store_dir = /home/fox/git/rhodecode-enterprise-ce/.dev/data/archive_cache
; The limit in GB sets how much data we cache before recycling last used, defaults to 10 gb
archive_cache.filesystem.cache_size_gb = 1
@ -455,7 +455,7 @@ celery.task_always_eager = false
; Default cache dir for caches. Putting this into a ramdisk can boost performance.
; eg. /tmpfs/data_ramdisk, however this directory might require large amount of space
cache_dir = /var/opt/rhodecode_data
cache_dir = /home/fox/git/rhodecode-enterprise-ce/.dev/data
; *********************************************
; `sql_cache_short` cache for heavy SQL queries
@ -644,7 +644,7 @@ channelstream.server = channelstream:8000
; For development, comment this out to use auto-generated proxy URL
;channelstream.ws_url = ws://rhodecode.yourserver.com/_channelstream
channelstream.secret = ENV_GENERATED
channelstream.history.location = /var/opt/rhodecode_data/channelstream_history
channelstream.history.location = /home/fox/git/rhodecode-enterprise-ce/.dev/data/channelstream_history
; Internal application path that Javascript uses to connect into.
; If you use proxy-prefix the prefix should be added before /_channelstream
@ -729,10 +729,10 @@ vcs.connection_timeout = 3600
vcs.methods.cache = true
; Filesystem location where Git lfs objects should be stored
vcs.git.lfs.storage_location = /var/opt/rhodecode_repo_store/.cache/git_lfs_store
vcs.git.lfs.storage_location = /home/fox/git/rhodecode-enterprise-ce/.dev/repo_store/.cache/git_lfs_store
; Filesystem location where Mercurial largefile objects should be stored
vcs.hg.largefiles.storage_location = /var/opt/rhodecode_repo_store/.cache/hg_largefiles_store
vcs.hg.largefiles.storage_location = /home/fox/git/rhodecode-enterprise-ce/.dev/repo_store/.cache/hg_largefiles_store
; ####################################################
; Subversion proxy support (mod_dav_svn)