mfa fixing

This commit is contained in:
2026-08-13 10:40:27 +01:00
parent bc4bbe6e56
commit 6063f95504
22 changed files with 834 additions and 158 deletions
+8 -5
View File
@@ -132,15 +132,18 @@ var pages = []string{
"ips.html", "add_ip.html", "edit_ip.html",
"dkim.html", "edit_dkim.html",
"settings.html", "letsencrypt.html", "logs.html", "view_message_content.html", "error.html",
"account.html", "first_login.html", "totp_setup.html",
"account.html", "first_login.html",
"admins.html", "add_admin.html", "edit_admin.html",
}
// standalonePages are pre-login screens — they intentionally don't use base.html's
// sidebar/dashboard chrome, since the visitor isn't authenticated yet.
// standalonePages don't use base.html's sidebar/dashboard chrome: pre-login screens
// (not authenticated yet) and the forced-MFA-setup flow (totp_setup.html included —
// deliberately isolated so an account with MFA enforced but not yet configured has
// no visible navigation to anything else, matching the enforcement gate in
// requireAuth/requireMailboxAuth that blocks every other route anyway).
var standalonePages = []string{
"login.html", "login_mfa.html",
"webmail_login.html", "webmail_login_mfa.html", "webmail_account.html", "webmail_totp_setup.html",
"login.html", "login_mfa.html", "mfa_setup_required.html", "totp_setup.html",
"webmail_login.html", "webmail_login_mfa.html", "webmail_account.html", "webmail_totp_setup.html", "webmail_mfa_setup_required.html",
}
// loadTemplates parses from the embedded assets FS (see embed.go), not the