larvit/plainpages
3
0
Fork 0
Code Issues 1 Pull Requests 3 Actions 2 Packages Projects Releases Wiki Activity

Verification/recovery: guard the OTP code field against a pasted space (numeric inputmode + digits-only pattern + one-time-code autofill); Kratos doesn't trim, so a space-padded code was rejected as 'invalid or already used'

Browse Source
This commit is contained in:
Lilleman auf Larv
2026-06-21 23:26:23 +02:00
parent 166f38d5dd
commit af097a8885
4 changed files with 38 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
views/partials/field.ejs
+2 -1
View File
@@ -3,6 +3,7 @@
Mirrors html-css-foundation auth markup. Config:
id, name, label
type? (default "text"), value?, placeholder?, autocomplete?, required?, readonly?, minlength?
inputmode?, pattern? virtual-keyboard hint + client-side validity regex (e.g. the OTP code)
icon? input-ico id (e.g. "i-mail") → left-padded input
optional? show an "Optional" tag in the label row
link? { href, label } inline beside the label (e.g. Forgot password?)
@@ -24,7 +25,7 @@
<% } else { -%>
<label for="<%= id %>"><%= locals.label %></label>
<% } -%>
<div class="input-wrap"><% if (icon) { %><svg class="ico ico-sm input-ico" aria-hidden="true"><use href="#<%= icon %>"/></svg><% } %><input class="input<% if (icon) { %> has-ico<% } %>" id="<%= id %>" name="<%= locals.name %>" type="<%= type %>"<% if (locals.autocomplete) { %> autocomplete="<%= locals.autocomplete %>"<% } %><% if (locals.placeholder) { %> placeholder="<%= locals.placeholder %>"<% } %><% if (locals.value != null) { %> value="<%= locals.value %>"<% } %><% if (locals.minlength != null) { %> minlength="<%= locals.minlength %>"<% } %><% if (error) { %> aria-invalid="true" aria-describedby="<%= errId %>"<% } %><% if (locals.required) { %> required<% } %><% if (locals.readonly) { %> readonly<% } %>></div>
<div class="input-wrap"><% if (icon) { %><svg class="ico ico-sm input-ico" aria-hidden="true"><use href="#<%= icon %>"/></svg><% } %><input class="input<% if (icon) { %> has-ico<% } %>" id="<%= id %>" name="<%= locals.name %>" type="<%= type %>"<% if (locals.autocomplete) { %> autocomplete="<%= locals.autocomplete %>"<% } %><% if (locals.inputmode) { %> inputmode="<%= locals.inputmode %>"<% } %><% if (locals.pattern) { %> pattern="<%= locals.pattern %>"<% } %><% if (locals.placeholder) { %> placeholder="<%= locals.placeholder %>"<% } %><% if (locals.value != null) { %> value="<%= locals.value %>"<% } %><% if (locals.minlength != null) { %> minlength="<%= locals.minlength %>"<% } %><% if (error) { %> aria-invalid="true" aria-describedby="<%= errId %>"<% } %><% if (locals.required) { %> required<% } %><% if (locals.readonly) { %> readonly<% } %>></div>
<% if (hint) { -%>
<span class="field-hint"><%= hint %></span>
<% } -%>