[TASK] Improve input fields in the authentication step of MFA
The input fields for entering the one-time password in the authentication views of TOTP and recovery codes are improved by adding two new attributes: autocomplete="one-time-code" ======================== In supporting browsers (mostly on mobile devices), this allows them to suggest or even insert one-time passwords, received e.g. via SMS. See: - https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete#values - https://developer.apple.com/documentation/security/password_autofill/enabling_password_autofill_on_an_html_input_element As a side effect this might also prevent browsers from auto completing the fields with unsuitable data, since this feature is usually enabled by default (autocomplete attribute not set). See: https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion inputmode="numeric" ================= In supporting browsers (mostly on mobile devices), this changes the keyboard layout to numeric. This is helpful, since only digits of 0-9 are required / allowed. See: - https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/inputmode - https://css-tricks.com/everything-you-ever-wanted-to-know-about-inputmode/#numeric Resolves: #94157 Releases: master Change-Id: Ifd3551b9a918f164bdc618a81555f573a91d2bd5 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/69182 Reviewed-by:Richard Haeser <richard@richardhaeser.com> Reviewed-by:
Torben Hansen <derhansen@gmail.com> Reviewed-by:
Jochen <rothjochen@gmail.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Benjamin Franzke <bfr@qbus.de> Tested-by:
core-ci <typo3@b13.com> Tested-by:
Jochen <rothjochen@gmail.com> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Tested-by:
Benjamin Franzke <bfr@qbus.de>
Showing
- typo3/sysext/core/Resources/Private/Templates/Authentication/MfaProvider/RecoveryCodes/Auth.html 1 addition, 1 deletion...plates/Authentication/MfaProvider/RecoveryCodes/Auth.html
- typo3/sysext/core/Resources/Private/Templates/Authentication/MfaProvider/Totp/Auth.html 1 addition, 1 deletion...ivate/Templates/Authentication/MfaProvider/Totp/Auth.html
Please register or sign in to comment