some user accounts require MFA be set up before proceeding.

Billy Clark · Billy Clark · commit ecaf754bc077 · 2017-11-02T14:24:37.000-04:00
diff --git a/README.md b/README.md
@@ -138,7 +138,6 @@ If configured, an alert will be shown to the user filled with the content of tha
 5. Click **hub-discovery**
 6. Click **idp4**
 7. Login as an "unprotected" user: `username=`**nag_for_mfa** `password=`**a**
-7. TODO: add remaining steps
 
 #### Force MFA setup
 1. Goto [http://ssp-hub.local](http://ssp-hub.local)
@@ -148,7 +147,6 @@ If configured, an alert will be shown to the user filled with the content of tha
 5. Click **hub-discovery**
 6. Click **idp4**
 7. Login as an "unsafe" user: `username=`**must_set_up_mfa** `password=`**a**
-7. TODO: add remaining steps
 
 #### Backup code
 1. Goto [http://ssp-hub.local](http://ssp-hub.local)
diff --git a/dictionaries/mfa.definition.json b/dictionaries/mfa.definition.json
@@ -78,6 +78,18 @@
 		"fr": "TODO",
 		"ko": "TODO"
 	},
+	"required_header": {
+		"en": "Protect this account",
+		"es": "TODO",
+		"fr": "TODO",
+		"ko": "TODO"
+	},
+	"required_info": {
+		"en": "Your account requires additional security, you must set up 2-step verification at this time.",
+		"es": "TODO",
+		"fr": "TODO",
+		"ko": "TODO"
+	},
 	"button_verify": {
 		"en": "Verify",
 		"es": "TODO",
@@ -102,6 +114,12 @@
 		"fr": "TODO",
 		"ko": "TODO"
 	},
+	"button_set_up": {
+		"en": "Set up now",
+		"es": "TODO",
+		"fr": "TODO",
+		"ko": "TODO"
+	},
 	"remember_this": {
 		"en": "Remember this computer for 30 days",
 		"es": "TODO",
diff --git a/themes/material/mfa/must-set-up-mfa.php b/themes/material/mfa/must-set-up-mfa.php
@@ -0,0 +1,71 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <title><?= $this->t('{material:mfa:title}') ?></title>
+
+    <?php include __DIR__ . '/../common-head-elements.php' ?>
+</head>
+<body class="gradient-bg">
+<div class="mdl-layout mdl-layout--fixed-header fill-viewport">
+    <header class="mdl-layout__header">
+        <div class="mdl-layout__header-row">
+            <span class="mdl-layout-title">
+                <?= $this->t('{material:mfa:header}') ?>
+            </span>
+        </div>
+    </header>
+    <main class="mdl-layout__content" layout-children="column">
+        <form layout-children="column"> <!-- TODO: change method to POST once implemented -->
+            <?php
+            foreach ($this->data['formData'] as $name => $value) {
+            ?>
+            <input type="hidden" name="<?= htmlentities($name); ?>"
+                   value="<?= htmlentities($value); ?>"/>
+            <?php
+            }
+            ?>
+            <div class="mdl-card mdl-shadow--8dp">
+                <div class="mdl-card__media white-bg margin" layout-children="column">
+                    <img src="/module.php/material/mfa-shield.svg"
+                         alt="<?= $this->t('{material:mfa:shield_icon}') ?>">
+                </div>
+
+                <div class="mdl-card__title center">
+                    <h1 class="mdl-card__title-text">
+                        <?= $this->t('{material:mfa:required_header}') ?>
+                    </h1>
+                </div>
+
+                <div class="mdl-card__title center" >
+                    <p class="mdl-card__subtitle-text">
+                        <?= $this->t('{material:mfa:required_info}') ?>
+                    </p>
+                </div>
+
+                <div class="mdl-card__actions" layout-children="row">
+                    <span flex></span>
+
+                    <?php
+                    $url = $this->data['learnMoreUrl'] ?? null;
+$url = "//example.org"; //TODO: remove when available
+                    if (! empty($url)) {
+                        ?>
+                        <a href="<?= htmlentities($url) ?>" target="_blank"
+                           class="mdl-button mdl-button--primary margin">
+                            <?= $this->t('{material:mfa:button_learn_more}') ?>
+                        </a>
+                        <?php
+                    }
+                    ?>
+
+                    <button type="submit" name="setUpMfa"
+                            class="mdl-button mdl-button--raised mdl-button--primary">
+                        <?= $this->t('{material:mfa:button_set_up}') ?>
+                    </button>
+                </div>
+            </div>
+        </form>
+    </main>
+</div>
+</body>
+</html>
