From fa66a71880be433e83e658db6291986377ae80b3 Mon Sep 17 00:00:00 2001
From: Son NK <nguyenkims@hotmail.com>
Date: Fri, 27 Dec 2019 15:24:04 +0100
Subject: [PATCH] Display MFA setup to user who doesn't have MFA enabled

---
 app/dashboard/templates/dashboard/setting.html | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/app/dashboard/templates/dashboard/setting.html b/app/dashboard/templates/dashboard/setting.html
index dd064264..5971174a 100644
--- a/app/dashboard/templates/dashboard/setting.html
+++ b/app/dashboard/templates/dashboard/setting.html
@@ -48,8 +48,17 @@
       <button class="btn btn-primary">Update</button>
     </form>
 
-    <hr>
+    {% if not current_user.enable_otp %}
+      <hr>
+      <h3 class="mb-0">Multi-Factor Authentication</h3>
+      <div class="small-text mb-3">
+        Secure your account with Multi-Factor Authentication.
+        This requires having applications like Google Authenticator, Authy, FreeOTP, etc.
+      </div>
+      <a href="{{ url_for('dashboard.mfa_setup') }}" class="btn btn-outline-primary">Enable</a>
+    {% endif %}
 
+    <hr>
     <h3 class="mb-0">Change password</h3>
     <div class="small-text mb-3">You will receive an email containing instructions on how to change password.</div>
     <form method="post">