#1303 Add MFA flags and actions in user management section

TheHive-Project · May 2, 2020 · 15c80dd · 15c80dd
1 parent a45ff6e
commit 15c80dd
Show file tree

Hide file tree

Showing 3 changed files with 40 additions and 3 deletions.
diff --git a/frontend/app/scripts/components/organisation/OrgUserListCmp.js b/frontend/app/scripts/components/organisation/OrgUserListCmp.js
@@ -32,6 +32,32 @@
                     });
                 };
 
+                self.resetMfa = function(user) {
+                    var modalInstance = ModalSrv.confirm(
+                        'Reset MFA',
+                        'Are you sure you want to reset MFA settings for this user?', {
+                            okText: 'Yes, reset it',
+                            flavor: 'danger'
+                        }
+                    );
+
+                    modalInstance.result
+                        .then(function() {
+                            UserSrv.resetMfa(user._id);
+                        })
+                        .then(function() {
+                            self.onReload();
+                            NotificationSrv.success(
+                                'MFA configuration of user ' + user.login + ' has been successfully disabled.'
+                            );
+                        })
+                        .catch(function(err) {
+                            if (!_.isString(err)) {
+                                NotificationSrv.error('OrgUserCtrl', err.data, err.status);
+                            }
+                        });
+                };
+
                 self.createKey = function(user) {
                     var modalInstance = ModalSrv.confirm(
                         'Create API key',

diff --git a/frontend/app/scripts/services/api/UserSrv.js b/frontend/app/scripts/services/api/UserSrv.js
@@ -168,8 +168,10 @@
                     });
             };
 
-            this.resetMfa = function() {
-                return $http.post('./api/v1/auth/totp/unset');
+            this.resetMfa = function(user) {
+                var url = './api/v1/auth/totp/unset';
+
+                return $http.post(user ? (url+'/'+ user) : url );
             };
 
             this.list = function(organisation, query) {

diff --git a/frontend/app/views/components/org/user.list.html b/frontend/app/views/components/org/user.list.html
@@ -18,7 +18,8 @@
                     <th></th>
                     <th>Password</th>
                     <th>API Key</th>
-                    <th style="width: 200px"></th>
+                    <th class="text-center" style="width: 100px">MFA</th>
+                    <th style="width: 180px"></th>
                 </tr>
             </thead>
             <tbody>
@@ -83,6 +84,14 @@ <h4 class="media-heading">
                             </div>
                         </span>
                     </td>
+                    <td class="text-center">
+                        <span ng-if="!user.hasMFA">
+                            No
+                        </span>
+                        <span ng-if="user.hasMFA">
+                            <button type="button" class="btn btn-danger btn-sm" ng-click="$ctrl.resetMfa(user)">Reset</button>
+                        </span>
+                    </td>
                     <td>
                         <span class="clickable mr-xxxs text-primary" ng-click="$ctrl.editUser(user)">
                             <i class="fa fa-edit"></i>Edit</span>