Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/static/templates/settings/api_key_modal.hbs

43 lines
2.1 KiB
Handlebars
Raw Normal View History

settings: Move API key form into its own modal. The modal is rendered dynamically to avoid password managers inserting passwords into the input field too aggressively. Fixes #12523.
2019-08-12 16:43:20 +02:00
<div id="api_key_modal" class="modal modal-bg hide fade" tabindex="-1" role="dialog"
aria-labelledby="api_key_modal_label" aria-hidden="true">
<div class="modal-header">
<button type="button" class="close" data-dismiss="modal" aria-label="{{t 'Close' }}">
<span aria-hidden="true">&times;</span>
</button>
<h3 class="inline-block" id="api_key_modal_label">{{t "Show API key" }}</h3>
<span class="alert-notification" id="api_key_status"></span>
</div>
<div class="modal-body">
<div id="password_confirmation">
<form id="api_key_form">
<p>{{t "Please re-enter your password to confirm your identity." }}
CVE-2020-14194: Use noopener/noreferrer for external links. We fixed the main issue of this form in CVE-2020-9444, but the audit done at that time only included links found in rendered_markdown; this change completes our audit for links with target=_blank anywhere in the codebase.
2020-05-26 05:15:21 +02:00
<a href="/accounts/password/reset/" target="_blank" rel="noopener noreferrer">
{{t "Never had one? Forgotten it?" }}
</a>
</p>
settings: Add show password feature to forms in settings modal. Fixes part of #17301.
2021-04-05 09:53:15 +02:00
<div class="control-group password-div">
settings: Move API key form into its own modal. The modal is rendered dynamically to avoid password managers inserting passwords into the input field too aggressively. Fixes #12523.
2019-08-12 16:43:20 +02:00
<label for="password" class="control-label">{{t "Current password" }}</label>
<input type="password" autocomplete="off" name="password" id="get_api_key_password" value="" />
passwords: Set title/aria-label attributes dynamically. This allows us to use different "Show password" and "Hide password" for these labels, which is more consistent with how other products implement this. It also lets us delete N duplicate copies of these strings in the HTML.
2021-04-20 16:49:39 +02:00
<i class="fa fa-eye-slash password_visibility_toggle tippy-zulip-tooltip" role="button"></i>
settings: Move API key form into its own modal. The modal is rendered dynamically to avoid password managers inserting passwords into the input field too aggressively. Fixes #12523.
2019-08-12 16:43:20 +02:00
</div>
<button type="submit" name="view_api_key" id="get_api_key_button" class="button sea-green">
{{t 'Get API key' }}
</button>
</form>
</div>
<div id="show_api_key">
<p>{{t "Your API key:" }}</p>
<p><b><span id="api_key_value"></span></b></p>
<div id="api_key_buttons">
<button type="submit" class="button white rounded regenerate_api_key">
{{t "Generate new API key" }}
</button>
<a id="download_zuliprc" download="{{zuliprc}}" class="button sea-green">
{{t "Download .zuliprc" }}
</a>
</div>
<div id="user_api_key_error" class="text-error"></div>
</div>
</div>
</div>