Skip to content

Update 2FA auth setup text

Peter Hegman requested to merge 277436-2fa-ux-text-changes into master

📖 What does this MR do?

Related to #277436 (closed)

Updates 2FA setup text based on discussion in #277436 (closed)

📋 Summary of changes

  • Update UI text on first step of 2FA setup
  • Update UI text in 2FA setup success alert

💻 Local testing

  1. Navigate to /-/profile/account
  2. Click "Enable two-factor authentication"
  3. Open up 1Password
  4. Click + icon and then "Login"
  5. Create a new "One-Time Password" section
    • Screen_Shot_2020-12-03_at_11.33.49_AM
  6. Click the QR icon left of the dropdown that was just used
  7. Drag the QR window over the QR code
  8. Paste the OTP in the "Pin code" field and click "Register with two-factor app"
  9. Copy recovery codes and click "Proceed"

Lock yourself out of GDK by accident?

  1. bin/rails console
  2. user = User.find(1) (or whatever ID your user is, default admin is 1)
  3. TwoFactor::DestroyService.new(user, user: user).execute

📷 Screenshots

View Before After
Step 1 Screen_Shot_2021-02-09_at_1.04.22_PM Screen_Shot_2021-02-09_at_1.02.20_PM
2FA setup complete Screen_Shot_2021-02-09_at_1.05.05_PM Screen_Shot_2021-02-09_at_1.03.09_PM

🚦 Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Peter Hegman

Merge request reports

Loading