mirror of
https://github.com/zulip/zulip.git
synced 2025-11-02 13:03:29 +00:00
bf14a0af4d
This replaces the two custom Google authentication backends originally written in 2012 with using the shared python-social-auth codebase that we already use for the GitHub authentication backend. These are: * GoogleMobileOauth2Backend, the ancient code path for mobile authentication last used by the EOL original Zulip Android app. * The `finish_google_oauth2` code path in zerver/views/auth.py, which was the webapp (and modern mobile app) Google authentication code path. This change doesn't fix any known bugs; its main benefit is that we get to remove hundreds of lines of security-sensitive semi-duplicated code, replacing it with a widely trusted, high quality third-party library.
170 lines
8.3 KiB
HTML
170 lines
8.3 KiB
HTML
{% extends "zerver/portico.html" %}
|
|
{# Login page. #}
|
|
|
|
{% block customhead %}
|
|
{{ super() }}
|
|
{{ render_bundle('signup') }}
|
|
{% endblock %}
|
|
|
|
{% block portico_content %}
|
|
|
|
|
|
|
|
{% if password_auth_enabled %}
|
|
<script>
|
|
{% if email %}
|
|
common.autofocus('#id_password');
|
|
{% else %}
|
|
common.autofocus('#id_username');
|
|
{% endif %}
|
|
</script>
|
|
{% endif %}
|
|
|
|
<!-- The following empty tag has unique data-page-id so that this
|
|
page can be easily identified in it's respective JavaScript file. -->
|
|
<div data-page-id="login-page"></div>
|
|
<div class="app login-page split-view new-style flex full-page">
|
|
<div class="inline-block">
|
|
<div class="lead">
|
|
<h1 class="get-started">{{ _("Log in to Zulip") }}</h1>
|
|
</div>
|
|
|
|
<div class="app-main login-page-container white-box inline-block">
|
|
{% if only_sso %}
|
|
{# SSO users don't have a password. #}
|
|
|
|
<div class="login-sso">
|
|
<a id="sso-login" href="/accounts/login/sso/?next={{ next }}" class="btn btn-large btn-primary">
|
|
{{ _('Log in with %(identity_provider)s', identity_provider="SSO") }}
|
|
</a>
|
|
</div>
|
|
|
|
{% else %}
|
|
{# Non-SSO users. #}
|
|
|
|
{% if realm_name %}
|
|
<div class="left-side">
|
|
<div class="org-header">
|
|
<img class="avatar" src="{{ realm_icon }}" alt="" />
|
|
<div class="info-box">
|
|
<div class="organization-name">{{ realm_name }}</div>
|
|
<div class="organization-path">{{ realm_uri }}</div>
|
|
</div>
|
|
</div>
|
|
<div class="description">
|
|
{{ realm_description|safe }}
|
|
</div>
|
|
</div>
|
|
{% endif %}
|
|
|
|
<div class="right-side">
|
|
{% if no_auth_enabled %}
|
|
<div class="alert">
|
|
<p>No authentication backends are enabled on this
|
|
server yet, so it is impossible to login!</p>
|
|
|
|
<p>See the <a href="https://zulip.readthedocs.io/en/latest/production/install.html#step-3-configure-zulip">Zulip
|
|
authentication documentation</a> to learn how to configure authentication backends.</p>
|
|
</div>
|
|
{% else %}
|
|
{% if password_auth_enabled %}
|
|
<form name="login_form" id="login_form" method="post" class="login-form"
|
|
action="{{ url('django.contrib.auth.views.login') }}?next={{ next }}">
|
|
|
|
{% if two_factor_authentication_enabled %}
|
|
{{ wizard.management_form }}
|
|
{% endif %}
|
|
{{ csrf_input }}
|
|
|
|
<!-- .no-validation is for removing the red star in CSS -->
|
|
{% if not two_factor_authentication_enabled or wizard.steps.current == 'auth' %}
|
|
<div class="input-box no-validation">
|
|
<input id="id_username" type="{% if not require_email_format_usernames %}text{% else %}email{% endif %}"
|
|
name="username" class="{% if require_email_format_usernames %}email {% endif %}required"
|
|
{% if email %} value="{{ email }}" {% else %} value="" {% endif %}
|
|
maxlength="72" required />
|
|
<label for="id_username">
|
|
{% if not require_email_format_usernames and email_auth_enabled %}
|
|
{{ _('Email or username') }}
|
|
{% elif not require_email_format_usernames %}
|
|
{{ _('Username') }}
|
|
{% else %}
|
|
{{ _('Email') }}
|
|
{% endif %}
|
|
</label>
|
|
</div>
|
|
|
|
<div class="input-box no-validation">
|
|
<input id="id_password" name="password" class="required" type="password" required />
|
|
<label for="id_password" class="control-label">{{ _('Password') }}</label>
|
|
</div>
|
|
{% else %}
|
|
{% include "two_factor/_wizard_forms.html" %}
|
|
{% endif %}
|
|
|
|
{% if form.errors %}
|
|
<div class="alert alert-error">
|
|
{% for error in form.errors.values() %}
|
|
<div>{{ error | striptags }}</div>
|
|
{% endfor %}
|
|
</div>
|
|
{% endif %}
|
|
|
|
{% if already_registered %}
|
|
<div class="alert">
|
|
{{ _("You've already registered with this email address. Please log in below.") }}
|
|
</div>
|
|
{% endif %}
|
|
|
|
{% if is_deactivated %}
|
|
<div class="alert">
|
|
{{ deactivated_account_error }}
|
|
</div>
|
|
{% endif %}
|
|
|
|
{% if subdomain %}
|
|
<div class="alert">
|
|
{{ wrong_subdomain_error }}
|
|
</div>
|
|
{% endif %}
|
|
|
|
<button type="submit" name="button" class="full-width">
|
|
<img class="loader" src="/static/images/loader.svg" alt="" />
|
|
<span class="text">{{ _("Log in") }}</span>
|
|
</button>
|
|
</form>
|
|
|
|
{% if any_oauth_backend_enabled %}
|
|
<div class="or"><span>{{ _('OR') }}</span></div>
|
|
{% endif %}
|
|
|
|
{% endif %} <!-- if password_auth_enabled -->
|
|
|
|
{% for backend in social_backends %}
|
|
<div class="login-social">
|
|
<form class="social_login_form form-inline {{ backend.name }}-wrapper" action="{{ backend.login_url }}" method="get">
|
|
<input type="hidden" name="next" value="{{ next }}">
|
|
<button class="login-social-button">
|
|
{{ _('Log in with %(identity_provider)s', identity_provider=backend.display_name) }}
|
|
</button>
|
|
</form>
|
|
</div>
|
|
{% endfor %}
|
|
|
|
<div class="actions">
|
|
{% if email_auth_enabled %}
|
|
<a class="forgot-password" href="/accounts/password/reset/">{{ _('Forgot your password?') }}</a>
|
|
{% endif %}
|
|
{% if not register_link_disabled %}
|
|
<a class="register-link float-right" href="/register/">{{ _('Sign up') }}</a>
|
|
{% endif %}
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
{% endblock %}
|