<% # Copyright (C) 2012 - present Instructure, Inc. # # This file is part of Canvas. # # Canvas is free software: you can redistribute it and/or modify it under # the terms of the GNU Affero General Public License as published by the Free # Software Foundation, version 3 of the License. # # Canvas is distributed in the hope that it will be useful, but WITHOUT ANY # WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR # A PARTICULAR PURPOSE. See the GNU Affero General Public License for more # details. # # You should have received a copy of the GNU Affero General Public License along # with this program. If not, see . %> <% css_bundle :otp_login js_bundle :otp_login @headers = false add_body_class "full-width modal body--login-confirmation" provide :page_title, t("Multi-Factor Authentication") %>

<% if configuring? %>

<% if @current_user.mfa_settings(pseudonym_hint: @current_pseudonym) == :required %>

<%= t("You are required to set up Multi-Factor Authentication.") %>

<% end %> <% otp_via_sms_message = otp_via_sms_in_us_region? ? mt(<<~MESSAGE) : "" The device can be a code generator or a mobile phone that receives text messages. **Using an authenticator app is strongly recommended for enhanced security.** MESSAGE %> <%= mt(<<~BODY, otp_via_sms_message:) Multi-Factor Authentication (MFA) enhances security by requiring a physical device and your Canvas login password. %{otp_via_sms_message} Configure MFA by scanning the QR code with a Time-based One-Time Password (TOTP) app on iPhone or Android (e.g., Google Authenticator, Microsoft Authenticator, Authy). After setup, print backup codes from your profile page if your primary MFA device is unavailable. BODY %>

<%= t("Use Authenticator App") %>

<% provisioning_uri = ROTP::TOTP.new(session[:pending_otp_secret_key]).provisioning_uri("#{@domain_root_account.name} Canvas- #{@current_pseudonym.unique_id}") qr_code = RQRCode::QRCode.new(provisioning_uri, level: :l) %>

"> <%= t("Secret Key:") %>
<%= session[:pending_otp_secret_key] %>

<% if otp_via_sms_in_us_region? %>

<%= t("Use SMS") %>

<%= t("Only US mobile numbers are supported.") %>

<% ccs = @current_user.communication_channels.sms.unretired.map { |cc| [cc.path, cc.id] } %> <% unless ccs.empty? %> <% ccs << ["<< #{t("a new mobile number")} >>", "{{id}}"] %> <%= form_for :otp_login, :url => send_otp_via_sms_path, :html => {:id => "select_phone_form", :class => "ic-Form-group ic-Form-group--horizontal"} do |f| %>

<%= f.blabel :otp_communication_channel_id, en: "US Mobile Number", class: "ic-Label" %>

<%= f.select(:otp_communication_channel_id, ccs, { selected: @cc.try(:id) }, class: "ic-Input") %>

<% end %> <% end %> <%= form_for :otp_login, url: send_otp_via_sms_path, html: { id: "new_phone_form", style: (hidden(false) unless ccs.empty?), class: "ic-Form-group" } do |f| %>

<%= f.blabel :phone_number, :en => "US Mobile Number", :class => "ic-Label" %>

<%= f.text_field :phone_number, :class => "ic-Input" %>

<% unless ccs.empty? %> <%= t("Choose an existing number") %> <% end %>

<% end %>

<% end %> <% if @cc %>

<%= t("Please enter the verification code sent to your mobile phone number.") %>

<% if @cc.otp_impaired? %>

<%= t("Please check your email if your SMS code does not arrive soon.") %>

<% end %> <% else %>

<%= t("Please enter the verification code shown by your token.") %>

<% end %> <%= form_for :otp_login, url: otp_login_path, html: { id: "login_form", class: "ic-Form-group" } do |f| %>

<%= f.blabel :verification_code, :en => "Verification Code", :class => "ic-Label" %> <%= f.text_field :verification_code, :class => "ic-Input", :autocomplete => "off" %>

<%= f.check_box :remember_me %> <%= f.label :remember_me, :en => "Remember this computer" %>

<% end %>

<%= t("Multi-Factor Authentication") %>

<%= t("Use Authenticator App") %>

<%= t("Use SMS") %>