Skip to content
Snippets Groups Projects
Commit 0c6590a1 authored by Oliver Bartsch's avatar Oliver Bartsch Committed by Benjamin Franzke
Browse files

[TASK] Improve input fields in the authentication step of MFA

The input fields for entering the one-time password in
the authentication views of TOTP and recovery codes
are improved by adding two new attributes:

autocomplete="one-time-code"
========================

In supporting browsers (mostly on mobile devices), this
allows them to suggest or even insert one-time passwords,
received e.g. via SMS.

See:

- https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete#values
- https://developer.apple.com/documentation/security/password_autofill/enabling_password_autofill_on_an_html_input_element

As a side effect this might also prevent browsers from
auto completing the fields with unsuitable data, since
this feature is usually enabled by default (autocomplete
attribute not set).

See: https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion

inputmode="numeric"
=================

In supporting browsers (mostly on mobile devices), this
changes the keyboard layout to numeric. This is helpful,
since only digits of 0-9 are required / allowed.

See:

- https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/inputmode
- https://css-tricks.com/everything-you-ever-wanted-to-know-about-inputmode/#numeric

Resolves: #94157
Releases: master
Change-Id: Ifd3551b9a918f164bdc618a81555f573a91d2bd5
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/69182


Reviewed-by: default avatarRichard Haeser <richard@richardhaeser.com>
Reviewed-by: default avatarTorben Hansen <derhansen@gmail.com>
Reviewed-by: default avatarJochen <rothjochen@gmail.com>
Reviewed-by: default avatarChristian Kuhn <lolli@schwarzbu.ch>
Reviewed-by: default avatarBenjamin Franzke <bfr@qbus.de>
Tested-by: default avatarcore-ci <typo3@b13.com>
Tested-by: default avatarJochen <rothjochen@gmail.com>
Tested-by: default avatarChristian Kuhn <lolli@schwarzbu.ch>
Tested-by: default avatarBenjamin Franzke <bfr@qbus.de>
parent 2da5fed0
Branches
Tags
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment