Login System Tutorial Part 4 - Login Access Debugging ===================================================== In this tutorial, we will discuss about checking the status of the user login with and without OTP validation. Go to **login.go** and assign the login validation if the credentials are invalid or does not meet the expected condition. .. code-block:: go // If the request method is POST if r.Method == "POST" { // Some codes // Login2FA login using username, password and otp for users with OTPRequired = true. session := uadmin.Login2FA(r, username, password, otp) // ------------------- ADD THIS CODE ------------------- // // Check whether the session returned is nil or the user is not active. if session == nil || !session.User.Active { // Assign the login validation here that will be used for UI displaying. ErrExists and Err fields are coming from the Context struct. c.ErrExists = true c.Err = "Invalid username/password or inactive user" } else { // Display the results uadmin.Trail(uadmin.DEBUG, "Username and password is valid.") } // ---------------------------------------------------- // } Add an error message in **login.html**. .. code-block:: html
{{if .ErrExists}}

{{.Err}}

{{end}} Now run your application and go to the login system path in the address bar (e.g. http://localhost:8080/login_system/). Assign the invalid username and password in the login form (e.g. sdfsdf, 123123). Click Login button to submit. .. image:: assets/invaliduserpass.png :align: center | Result .. image:: assets/invaliduserpassresult.png :align: center But if you assign the valid username and password in the login form (e.g. admin, admin) .. image:: assets/adminloginformuserpass.png :align: center | Check your terminal for the result. .. code-block:: bash [ DEBUG ] Username and password is valid. Exit your application. Go to **login.go** in views folder and let's create a validation to check if the user requires OTP for the login process. .. code-block:: go // Check whether the session returned is nil or the user is not active. if session == nil || !session.User.Active { // Some codes here } else { // ----------------------------- ADD THIS CODE ----------------------------- // // If the user has OTPRequired enabled, it will print the username and OTP in the terminal. if session.PendingOTP { uadmin.Trail(uadmin.INFO, "User: %s OTP: %s", session.User.Username, session.User.GetOTP()) } // As long as the username and password is valid, it will create a session cookie in the browser. cookie, _ := r.Cookie("session") if cookie == nil { cookie = &http.Cookie{} } cookie.Name = "session" cookie.Value = session.Key cookie.Path = "/" cookie.SameSite = http.SameSiteStrictMode http.SetCookie(w, cookie) // Check for OTP if session.PendingOTP { // After the user enters a valid username and password in the first part of the form, these values will be used on the second part in the UI where the OTP input field will be displayed afterwards. c.Username = username c.Password = password c.OTPRequired = true } else { uadmin.Trail(uadmin.DEBUG, "Your login credentials are valid.") } // ------------------------------------------------------------------------- // } Add validation in **login.html** to say that OTP input field should be displayed if the user has OTPRequired enabled in the database and after the user enters a valid username and password. .. code-block:: html


{{if .OTPRequired}}
{{end}}

Run your application and go to the admin path in the address bar (e.g. http://localhost:8080/admin/). Login using "admin” as username and password. .. image:: assets/loginform.png :align: center | Click on "USERS". .. image:: assets/usermodelhighlighted.png | Click System Admin. .. image:: assets/systemadminhighlighted.png | Scroll down the form then activate OTP Required on that user. .. image:: assets/activateotprequired.png | Result .. image:: assets/otprequiredtrue.png | Click the blue person icon on the top right corner then select admin in order to visit the profile page. .. image:: assets/adminhighlightedprofile.png :align: center | Scroll down the form. There is a 2FA image to fetch the QR code which is typically used for storing URLs or other information for reading by the camera on a smartphone. In order to do that, you can use Google Authenticator (`Android`_, `iOS`_). It is a software-based authenticator that implements two-step verification services using the Time-based One-time Password Algorithm and HMAC-based One-time Password algorithm, for authenticating users of mobile applications by Google. [#f1]_ .. image:: assets/2faimage.png :align: center .. _Android: https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=en .. _iOS: https://itunes.apple.com/ph/app/google-authenticator/id388497605?mt=8 | If there is a problem, you may go to your terminal and check the OTP verification code for login. Now go to the login system path in the address bar (e.g. http://localhost:8080/login_system/). Assign the username and password first. Click Login button to submit. .. image:: assets/adminuserpasshiddenotp.png :align: center | After the system validates the username and password, it will display the OTP input field in the UI. Check your terminal or Google Authenticator for the OTP (e.g. 123456). .. image:: assets/adminloginformdatatest.png :align: center | Check your terminal for the result. .. code-block:: bash [ DEBUG ] Your login credentials are valid. | You can also see that the session cookie is created in your browser. .. image:: assets/sessioncookiebrowser.png :align: center | Click `here`_ to view our progress so far. In the `next part`_, we will talk about accessing the home page after the user logins an account with valid credentials. .. _next part: https://uadmin-docs.readthedocs.io/en/latest/login_system_views/tutorial/part5.html .. _here: https://uadmin-docs.readthedocs.io/en/latest/login_system_views/tutorial/full_code/part4.html .. toctree:: :maxdepth: 1 full_code/part4 Reference --------- .. [#f1] No author (28 May 2019). Google Authenticator. Retrieved from https://en.wikipedia.org/wiki/Google_Authenticator