${msg("editAccountHtmlTitle")}
+ * ${msg("requiredFields")} + + + diff --git a/themes/src/main/resources/theme/unixdog/account/applications.ftl b/themes/src/main/resources/theme/unixdog/account/applications.ftl new file mode 100755 index 0000000000..3193a0ae6d --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/account/applications.ftl @@ -0,0 +1,72 @@ +<#import "template.ftl" as layout> +<@layout.mainLayout active='applications' bodyClass='applications'; section> + +${msg("applicationsHtmlTitle")}
+ + + + diff --git a/themes/src/main/resources/theme/unixdog/account/authentication.ftl b/themes/src/main/resources/theme/unixdog/account/authentication.ftl new file mode 100755 index 0000000000..347b157cfd --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/account/authentication.ftl @@ -0,0 +1,58 @@ +<#import "template.ftl" as layout> +<@layout.mainLayout active='authentication' bodyClass='authentication'; section> + +${msg("authenticationTitle")}
+ + <#list authentication.credentialTypes as credType> +${msg(credType.displayName)}
+${msg(credType.helpText!"default-help-text")}
+| Name | +Created | +Actions | +
|---|---|---|
| ${userData.credential.userLabel!"No label"} | +${userData.credential.createdDate?number_to_datetime!"No date"} | ++ <#if credType.removable!false> + + + <#if credType.updateAction??> + + + | +
+
+
+
+
+ ${msg("federatedIdentitiesHtmlTitle")}
+
+ <#list federatedIdentity.identities as identity>
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/account/log.ftl b/themes/src/main/resources/theme/unixdog/account/log.ftl
new file mode 100644
index 0000000000..29046cf0d2
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/account/log.ftl
@@ -0,0 +1,35 @@
+<#import "template.ftl" as layout>
+<@layout.mainLayout active='log' bodyClass='log'; section>
+
+
+
+
+
+
+
+
+
+
+
+ <#if identity.connected>
+ <#if federatedIdentity.removeLinkPossible>
+
+
+ <#else>
+
+
+
+
+
+
+
+
+ ${msg("accountLogHtmlTitle")}
+| ${msg("date")} | +${msg("event")} | +${msg("ip")} | +${msg("client")} | +${msg("details")} | +
| ${event.date?datetime} | +${event.event} | +${event.ipAddress} | +${event.client!} | +<#list event.details as detail>${detail.key} = ${detail.value} <#if detail_has_next>, | +
+
+
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/account/resource-detail.ftl b/themes/src/main/resources/theme/unixdog/account/resource-detail.ftl
new file mode 100755
index 0000000000..2c963d7732
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/account/resource-detail.ftl
@@ -0,0 +1,277 @@
+<#import "template.ftl" as layout>
+<@layout.mainLayout active='authorization' bodyClass='authorization'; section>
+
+
+
+
+
+
+ ${msg("changePasswordHtmlTitle")}
+
+ ${msg("allFieldsRequired")}
+
+
+
+
+ <#if authorization.resource.iconUri??>
+
+
+ + ${msg("myResources")} <#if authorization.resource.displayName??>${authorization.resource.displayName}<#else>${authorization.resource.name} +
++ + +
+
+
+
+ + ${msg("peopleAccessResource")} +
+
+
+
+
+
+
+
+
+ | ${msg("user")} | +${msg("permission")} | +${msg("date")} | +${msg("action")} | +
|---|---|---|---|
| ${msg("resourceIsNotBeingShared")} | +|||
+
+
+
+ + ${msg("resourceManagedPolicies")} +
+
+
+
+
+
+
+
+
+ | ${msg("description")} | +${msg("permission")} | +${msg("action")} | +
|---|---|---|
| + ${msg("resourceNoPermissionsGrantingAccess")} + | +||
+
+
+
+ + ${msg("shareWithOthers")} +
+
+
+
+
+
+ + diff --git a/themes/src/main/resources/theme/unixdog/account/resources.ftl b/themes/src/main/resources/theme/unixdog/account/resources.ftl new file mode 100755 index 0000000000..d86e8bc323 --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/account/resources.ftl @@ -0,0 +1,403 @@ +<#import "template.ftl" as layout> +<@layout.mainLayout active='authorization' bodyClass='authorization'; section> + + +
+
+
+ <#if authorization.resourcesWaitingApproval?size != 0>
+
+
+ + ${msg("myResources")} +
+
+
+
+
+ + ${msg("needMyApproval")} +
+
+
+
+
+
+
+
+
+
+ | ${msg("resource")} | +${msg("requestor")} | +${msg("permissionRequestion")} | +${msg("action")} | +
|---|
+
+
+
+ + ${msg("myResourcesSub")} +
+
+
+
+
+
+
+
+
+ | ${msg("resource")} | +${msg("application")} | +${msg("peopleSharingThisResource")} | +|
|---|---|---|---|
| + + <#if resource.displayName??>${resource.displayName}<#else>${resource.name} + + | ++ <#if resource.resourceServer.baseUri??> + ${resource.resourceServer.name} + <#else> + ${resource.resourceServer.name} + + | ++ <#if resource.shares?size != 0> + ${resource.shares?size} + <#else> + ${msg("notBeingShared")} + + | +|
| ${msg("notHaveAnyResource")} | +|||
+
+
+
+ + ${msg("resourcesSharedWithMe")} +
+
+
+
+ <#if authorization.resourcesWaitingOthersApproval?size != 0>
+
+
+
+ <#if authorization.sharedResources?size != 0>
+
+
+ +
+
+
+
+ + ${msg("requestsWaitingApproval")} +
+
+
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/account/resources/css/main.css b/themes/src/main/resources/theme/unixdog/account/resources/css/main.css
new file mode 100644
index 0000000000..5b800ef012
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/account/resources/css/main.css
@@ -0,0 +1,218 @@
+body {
+ font-family: monospace;
+ margin: 0;
+ background: #080e08;
+ color: #f6f6f6;
+
+ display: flex;
+ flex-direction: column;
+ min-height: 100vh;
+}
+
+h1, h2 {
+ color: #4af626;
+}
+
+footer {
+ padding: 10px;
+ max-width: 800px;
+ width: 100%;
+ background: #3a7920;
+ color: #f6f6f6;
+
+ margin: auto auto 0;
+ box-sizing: border-box;
+}
+
+a:link {
+ color: #2cacb0;
+}
+
+a:visited {
+ color: #b4778f;
+}
+
+tr:nth-child(even) td {
+ background-color: #222;
+}
+
+@media (prefers-color-scheme: light) {
+ body {
+ background: #fcfffc;
+ color: #211c1b;
+ }
+
+ h1, h2 {
+ color: #4c982a;
+ }
+
+ a:link {
+ color: #1f7b7e;
+ }
+
+ a:visited {
+ color: #7c5263;
+ }
+
+ textarea {
+ background: #ffffff;
+ color: #211c1b;
+ }
+
+ tr:nth-child(even) td {
+ background-color: #eee;
+ }
+}
+
+header {
+ background: linear-gradient(
+ 90deg,
+ rgba(255, 0, 0, 1) 0%,
+ rgba(255, 154, 0, 1) 10%,
+ rgba(208, 222, 33, 1) 20%,
+ rgba(79, 220, 74, 1) 30%,
+ rgba(63, 218, 216, 1) 40%,
+ rgba(47, 201, 226, 1) 50%,
+ rgba(28, 127, 238, 1) 60%,
+ rgba(95, 21, 242, 1) 70%,
+ rgba(186, 12, 248, 1) 80%,
+ rgba(251, 7, 217, 1) 90%,
+ rgba(255, 0, 0, 1) 100%
+ );
+ min-height: 50px;
+ display: flex;
+ color: black;
+ box-sizing: border-box;
+}
+
+#header-content {
+ max-width: 800px;
+ margin: auto;
+ width: 100%;
+ align-content: center;
+ flex-direction: row;
+ display: flex;
+ padding: 10px;
+}
+#header-content h1 {
+ color: black;
+ margin: auto auto auto 1rem;
+}
+
+#header-content img {
+ display: inline;
+}
+
+main {
+ max-width: 800px;
+ margin: 0 auto;
+ padding: 10px;
+ width: 100%;
+ box-sizing: border-box;
+}
+
+
+span.copyleft {
+ display: inline-block;
+ transform: rotate(180deg);
+}
+
+footer a:link, footer a:visited {
+ text-decoration: none;
+ font-weight: bold;
+ color: white;
+}
+
+footer a:hover {
+ text-decoration: underline;
+}
+
+
+input {
+ background: #332c29;
+ color: #f6f6f6;
+}
+
+textarea {
+ background: #332c29;
+ color: #f6f6f6;
+}
+
+textarea.big {
+ width: 100%;
+ height: 5em;
+}
+
+.error, .required, .alert-error, .form-group.has-error {
+ color: #f00;
+}
+
+#nav {
+ margin: auto 0 auto auto;
+ display: flex;
+ flex-direction: row;
+ flex-wrap: wrap;
+}
+
+#nav a {
+ display: block;
+ padding: 10px;
+}
+
+pre {
+ white-space: pre-wrap;
+}
+
+#header-content a:link {
+ text-decoration: none;
+ color: black;
+}
+#header-content a:visited {
+ text-decoration: none;
+ color: black;
+}
+
+#header-content a:hover {
+ text-decoration: underline;
+}
+
+label.field-with-error {
+ color: red;
+}
+
+img.stats {
+ width: 100%;
+ display: block;
+}
+
+/* Tables */
+table {
+ border-collapse: collapse;
+ width: 100%;
+}
+th, td {
+ padding: 5px;
+}
+th {
+ border-bottom: solid 2px currentColor;
+}
+
+td:first-child {
+ border-right: solid 2px currentColor;
+ border-left: none;
+}
+td {
+ border-right: solid 2px currentColor;
+ border-left: solid 2px currentColor;
+}
+td:last-child {
+ border-right: none;
+ border-left: solid 2px currentColor;
+}
+
+/* Responsive */
+.responsive-wrapper {
+ overflow-x: auto;
+ width: 100%;
+}
+
diff --git a/themes/src/main/resources/theme/unixdog/account/resources/img/favicon.ico b/themes/src/main/resources/theme/unixdog/account/resources/img/favicon.ico
new file mode 100644
index 0000000000..46eafce9bc
Binary files /dev/null and b/themes/src/main/resources/theme/unixdog/account/resources/img/favicon.ico differ
diff --git a/themes/src/main/resources/theme/unixdog/account/resources/js/base64url.js b/themes/src/main/resources/theme/unixdog/account/resources/js/base64url.js
new file mode 100644
index 0000000000..64555bfbd5
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/account/resources/js/base64url.js
@@ -0,0 +1,114 @@
+// for embedded scripts, quoted and modified from https://github.com/swansontec/rfc4648.js by William Swanson
+'use strict';
+var base64url = base64url || {};
+(function(base64url) {
+
+ function parse (string, encoding, opts = {}) {
+ // Build the character lookup table:
+ if (!encoding.codes) {
+ encoding.codes = {};
+ for (let i = 0; i < encoding.chars.length; ++i) {
+ encoding.codes[encoding.chars[i]] = i;
+ }
+ }
+
+ // The string must have a whole number of bytes:
+ if (!opts.loose && (string.length * encoding.bits) & 7) {
+ throw new SyntaxError('Invalid padding');
+ }
+
+ // Count the padding bytes:
+ let end = string.length;
+ while (string[end - 1] === '=') {
+ --end;
+
+ // If we get a whole number of bytes, there is too much padding:
+ if (!opts.loose && !(((string.length - end) * encoding.bits) & 7)) {
+ throw new SyntaxError('Invalid padding');
+ }
+ }
+
+ // Allocate the output:
+ const out = new (opts.out || Uint8Array)(((end * encoding.bits) / 8) | 0);
+
+ // Parse the data:
+ let bits = 0; // Number of bits currently in the buffer
+ let buffer = 0; // Bits waiting to be written out, MSB first
+ let written = 0; // Next byte to write
+ for (let i = 0; i < end; ++i) {
+ // Read one character from the string:
+ const value = encoding.codes[string[i]];
+ if (value === void 0) {
+ throw new SyntaxError('Invalid character ' + string[i]);
+ }
+
+ // Append the bits to the buffer:
+ buffer = (buffer << encoding.bits) | value;
+ bits += encoding.bits;
+
+ // Write out some bits if the buffer has a byte's worth:
+ if (bits >= 8) {
+ bits -= 8;
+ out[written++] = 0xff & (buffer >> bits);
+ }
+ }
+
+ // Verify that we have received just enough bits:
+ if (bits >= encoding.bits || 0xff & (buffer << (8 - bits))) {
+ throw new SyntaxError('Unexpected end of data');
+ }
+
+ return out
+ }
+
+ function stringify (data, encoding, opts = {}) {
+ const { pad = true } = opts;
+ const mask = (1 << encoding.bits) - 1;
+ let out = '';
+
+ let bits = 0; // Number of bits currently in the buffer
+ let buffer = 0; // Bits waiting to be written out, MSB first
+ for (let i = 0; i < data.length; ++i) {
+ // Slurp data into the buffer:
+ buffer = (buffer << 8) | (0xff & data[i]);
+ bits += 8;
+
+ // Write out as much as we can:
+ while (bits > encoding.bits) {
+ bits -= encoding.bits;
+ out += encoding.chars[mask & (buffer >> bits)];
+ }
+ }
+
+ // Partial character:
+ if (bits) {
+ out += encoding.chars[mask & (buffer << (encoding.bits - bits))];
+ }
+
+ // Add padding characters until we hit a byte boundary:
+ if (pad) {
+ while ((out.length * encoding.bits) & 7) {
+ out += '=';
+ }
+ }
+
+ return out
+ }
+
+ const encoding = {
+ chars: 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_',
+ bits: 6
+ }
+
+ base64url.decode = function (string, opts) {
+ return parse(string, encoding, opts);
+ }
+
+ base64url.encode = function (data, opts) {
+ return stringify(data, encoding, opts)
+ }
+
+ return base64url;
+}(base64url));
+
+
diff --git a/themes/src/main/resources/theme/unixdog/account/sessions.ftl b/themes/src/main/resources/theme/unixdog/account/sessions.ftl
new file mode 100755
index 0000000000..ad242b8ca9
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/account/sessions.ftl
@@ -0,0 +1,39 @@
+<#import "template.ftl" as layout>
+<@layout.mainLayout active='sessions' bodyClass='sessions'; section>
+
+ ${msg("havePermissionRequestsWaitingForApproval",authorization.resourcesWaitingOthersApproval?size)}
+ ${msg("clickHereForDetails")}
+
+
+
+
+
+
+
+
+
+
+
+ ${msg("sessionsHtmlTitle")}
+ +| ${msg("ip")} | +${msg("started")} | +${msg("lastAccess")} | +${msg("expires")} | +${msg("clients")} | +
|---|---|---|---|---|
| ${session.ipAddress} | +${session.started?datetime} | +${session.lastAccess?datetime} | +${session.expires?datetime} | +
+ <#list session.clients as client>
+ ${client} + + |
+
+ 
+
+
+ UNIX.dog Account
+ +
+ <#if code.success>
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/delete-account-confirm.ftl b/themes/src/main/resources/theme/unixdog/login/delete-account-confirm.ftl
new file mode 100644
index 0000000000..6aa93f0964
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/delete-account-confirm.ftl
@@ -0,0 +1,33 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout; section>
+
+ <#if section = "header">
+ ${msg("deleteAccountConfirm")}
+
+ <#elseif section = "form">
+
+
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/error.ftl b/themes/src/main/resources/theme/unixdog/login/error.ftl
new file mode 100755
index 0000000000..112ded3eae
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/error.ftl
@@ -0,0 +1,16 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayMessage=false; section>
+ <#if section = "header">
+ ${kcSanitize(msg("errorTitle"))?no_esc}
+ <#elseif section = "form">
+ ${msg("copyCodeInstruction")}
+ + <#else> +${kcSanitize(code.error)}
+ +
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/frontchannel-logout.ftl b/themes/src/main/resources/theme/unixdog/login/frontchannel-logout.ftl
new file mode 100644
index 0000000000..3de7d2500e
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/frontchannel-logout.ftl
@@ -0,0 +1,30 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout; section>
+ <#if section = "header">
+
+ ${msg("frontchannel-logout.title")}
+ <#elseif section = "form">
+ ${kcSanitize(message.summary)?no_esc}
+ <#if skipLink??> + <#else> + <#if client?? && client.baseUrl?has_content> + + + +${msg("frontchannel-logout.message")}
+-
+ <#list logout.clients as client>
+
- + ${client.name} + + + +
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/login-config-totp.ftl b/themes/src/main/resources/theme/unixdog/login/login-config-totp.ftl
new file mode 100755
index 0000000000..80145856d8
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-config-totp.ftl
@@ -0,0 +1,108 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayRequiredFields=false displayMessage=!messagesPerField.existsError('totp','userLabel'); section>
+
+ <#if section = "header">
+ ${msg("loginTotpTitle")}
+ <#elseif section = "form">
+ ${message.summary}<#if requiredActions??><#list requiredActions>: <#items as reqActionItem>${kcSanitize(msg("requiredAction.${reqActionItem}"))?no_esc}<#sep>, <#else>
+ <#if skipLink??> + <#else> + <#if pageRedirectUri?has_content> +${kcSanitize(msg("backToApplication"))?no_esc}
+ <#elseif actionUri?has_content> + + <#elseif (client.baseUrl)?has_content> + + + +-
+
-
+
${msg("loginTotpStep1")}
+ +-
+ <#list totp.supportedApplications as app>
+
- ${msg(app)} + +
+
+ <#if mode?? && mode = "manual">
+ -
+
${msg("loginTotpManualStep2")}
+${totp.totpSecretEncoded}
+ +
+ -
+
${msg("loginTotpManualStep3")}
++
-
+
- ${msg("loginTotpType")}: ${msg("loginTotp." + totp.policy.type)} +
- ${msg("loginTotpAlgorithm")}: ${totp.policy.getAlgorithmKey()} +
- ${msg("loginTotpDigits")}: ${totp.policy.digits} + <#if totp.policy.type = "totp"> +
- ${msg("loginTotpInterval")}: ${totp.policy.period} + <#elseif totp.policy.type = "hotp"> +
- ${msg("loginTotpCounter")}: ${totp.policy.initialCounter} + +
+ <#else>
+ -
+
${msg("loginTotpStep2")}
+
+ +
+
+ -
+
${msg("loginTotpStep3")}
+${msg("loginTotpStep3DeviceName")}
+
+
+ ${msg("emailLinkIdp1", idpDisplayName, brokerContext.username, realm.displayName)} +
++ ${msg("emailLinkIdp2")} ${msg("doClickHere")} ${msg("emailLinkIdp3")} +
++ ${msg("emailLinkIdp4")} ${msg("doClickHere")} ${msg("emailLinkIdp5")} +
+ + \ No newline at end of file diff --git a/themes/src/main/resources/theme/unixdog/login/login-oauth-grant.ftl b/themes/src/main/resources/theme/unixdog/login/login-oauth-grant.ftl new file mode 100755 index 0000000000..d5cfc4aac7 --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/login/login-oauth-grant.ftl @@ -0,0 +1,68 @@ +<#import "template.ftl" as layout> +<@layout.registrationLayout bodyClass="oauth"; section> + <#if section = "header"> + <#if client.attributes.logoUri??> ++ <#if client.name?has_content> + ${msg("oauthGrantTitle",advancedMsg(client.name))} + <#else> + ${msg("oauthGrantTitle",client.clientId)} + +
+ <#elseif section = "form"> +
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/login-oauth2-device-verify-user-code.ftl b/themes/src/main/resources/theme/unixdog/login/login-oauth2-device-verify-user-code.ftl
new file mode 100644
index 0000000000..dfb625fe8b
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-oauth2-device-verify-user-code.ftl
@@ -0,0 +1,31 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout; section>
+ <#if section = "header">
+ ${msg("oauth2DeviceVerificationTitle")}
+ <#elseif section = "form">
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/login-otp.ftl b/themes/src/main/resources/theme/unixdog/login/login-otp.ftl
new file mode 100755
index 0000000000..a43778d900
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-otp.ftl
@@ -0,0 +1,58 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayMessage=!messagesPerField.existsError('totp'); section>
+ <#if section="header">
+ ${msg("doLogIn")}
+ <#elseif section="form">
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/login-page-expired.ftl b/themes/src/main/resources/theme/unixdog/login/login-page-expired.ftl
new file mode 100644
index 0000000000..2b470e018b
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-page-expired.ftl
@@ -0,0 +1,11 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout; section>
+ <#if section = "header">
+ ${msg("pageExpiredTitle")}
+ <#elseif section = "form">
+ ${msg("oauthGrantRequest")}
+-
+ <#if oauth.clientScopesRequested??>
+ <#list oauth.clientScopesRequested as clientScope>
+
- + <#if !clientScope.dynamicScopeParameter??> + ${advancedMsg(clientScope.consentScreenText)} + <#else> + ${advancedMsg(clientScope.consentScreenText)}: ${clientScope.dynamicScopeParameter} + + + + + +
+ <#if client.name?has_content> + ${msg("oauthGrantInformation",advancedMsg(client.name))} + <#else> + ${msg("oauthGrantInformation",client.clientId)} + + <#if client.attributes.tosUri??> + ${msg("oauthGrantReview")} + ${msg("oauthGrantTos")} + + <#if client.attributes.policyUri??> + ${msg("oauthGrantReview")} + ${msg("oauthGrantPolicy")} + +
+ + + + +
+ ${msg("pageExpiredMsg1")} ${msg("doClickHere")} .
+ ${msg("pageExpiredMsg2")} ${msg("doClickHere")} .
+
+
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/login-recovery-authn-code-config.ftl b/themes/src/main/resources/theme/unixdog/login/login-recovery-authn-code-config.ftl
new file mode 100644
index 0000000000..5bd3559d73
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-recovery-authn-code-config.ftl
@@ -0,0 +1,184 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout; section>
+
+<#if section = "header">
+ ${msg("recovery-code-config-header")}
+<#elseif section = "form">
+
+
+
+
+
+
+
+
+
+
+ + Warning alert: + ${msg("recovery-code-config-warning-title")} +
+
+
+ ${msg("recovery-code-config-warning-message")}
+-
+ <#list recoveryAuthnCodesConfigBean.generatedRecoveryAuthnCodesList as code>
+
- ${code?counter}: ${code[0..3]}-${code[4..7]}-${code[8..]} + +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/login-recovery-authn-code-input.ftl b/themes/src/main/resources/theme/unixdog/login/login-recovery-authn-code-input.ftl
new file mode 100644
index 0000000000..8d67d434c8
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-recovery-authn-code-input.ftl
@@ -0,0 +1,44 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayMessage=!messagesPerField.existsError('recoveryCodeInput'); section>
+
+ <#if section = "header">
+ ${msg("auth-recovery-code-header")}
+ <#elseif section = "form">
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/login-reset-password.ftl b/themes/src/main/resources/theme/unixdog/login/login-reset-password.ftl
new file mode 100755
index 0000000000..800faea1f0
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-reset-password.ftl
@@ -0,0 +1,39 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayInfo=true displayMessage=!messagesPerField.existsError('username'); section>
+ <#if section = "header">
+ ${msg("emailForgotTitle")}
+ <#elseif section = "form">
+
+ <#elseif section = "info" >
+ <#if realm.duplicateEmailsAllowed>
+ ${msg("emailInstructionUsername")}
+ <#else>
+ ${msg("emailInstruction")}
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/login-update-password.ftl b/themes/src/main/resources/theme/unixdog/login/login-update-password.ftl
new file mode 100755
index 0000000000..b884d75271
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-update-password.ftl
@@ -0,0 +1,71 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayMessage=!messagesPerField.existsError('password','password-confirm'); section>
+ <#if section = "header">
+ ${msg("updatePasswordTitle")}
+ <#elseif section = "form">
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/login-update-profile.ftl b/themes/src/main/resources/theme/unixdog/login/login-update-profile.ftl
new file mode 100755
index 0000000000..be579b01bd
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-update-profile.ftl
@@ -0,0 +1,99 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayMessage=!messagesPerField.existsError('username','email','firstName','lastName'); section>
+ <#if section = "header">
+ ${msg("loginProfileTitle")}
+ <#elseif section = "form">
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/login-username.ftl b/themes/src/main/resources/theme/unixdog/login/login-username.ftl
new file mode 100755
index 0000000000..0c18cb7ccb
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-username.ftl
@@ -0,0 +1,89 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayMessage=!messagesPerField.existsError('username') displayInfo=(realm.password && realm.registrationAllowed && !registrationDisabled??); section>
+ <#if section = "header">
+ ${msg("loginAccountTitle")}
+ <#elseif section = "form">
+
+
+
+ <#elseif section = "info" >
+ <#if realm.password && realm.registrationAllowed && !registrationDisabled??>
+
+ <#if realm.password>
+
+
+
+
+ ${msg("noAccount")} ${msg("doRegister")}
+
+
+ <#elseif section = "socialProviders" >
+ <#if realm.password && social.providers??>
+
+
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/login-verify-email.ftl b/themes/src/main/resources/theme/unixdog/login/login-verify-email.ftl
new file mode 100755
index 0000000000..b47d8ca8d5
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/login-verify-email.ftl
@@ -0,0 +1,14 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayInfo=true; section>
+ <#if section = "header">
+ ${msg("emailVerifyTitle")}
+ <#elseif section = "form">
+ ${msg("emailVerifyInstruction1",user.email)}
+ <#elseif section = "info"> +
+ ${msg("emailVerifyInstruction2")}
+
+ ${msg("doClickHere")} ${msg("emailVerifyInstruction3")}
+
+
+ <#elseif section = "info" >
+ <#if realm.password && realm.registrationAllowed && !registrationDisabled??>
+
+ <#if realm.password>
+
+
+
+
+
+
+
+ <#elseif section = "socialProviders" >
+ <#if realm.password && social.providers??>
+
+
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/logout-confirm.ftl b/themes/src/main/resources/theme/unixdog/login/logout-confirm.ftl
new file mode 100644
index 0000000000..6c0b4e97b6
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/logout-confirm.ftl
@@ -0,0 +1,38 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout; section>
+ <#if section = "header">
+ ${msg("logoutConfirmTitle")}
+ <#elseif section = "form">
+
+ ${msg("noAccount")} ${msg("doRegister")}
+
+
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/messages/messages_en.properties b/themes/src/main/resources/theme/unixdog/login/messages/messages_en.properties
new file mode 100755
index 0000000000..9aed132290
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/messages/messages_en.properties
@@ -0,0 +1,511 @@
+doLogIn=Sign In
+doRegister=Register
+doCancel=Cancel
+doSubmit=Submit
+doBack=Back
+doYes=Yes
+doNo=No
+doContinue=Continue
+doIgnore=Ignore
+doAccept=Accept
+doDecline=Decline
+doForgotPassword=Forgot Password?
+doClickHere=Click here
+doImpersonate=Impersonate
+doTryAgain=Try again
+doTryAnotherWay=Try Another Way
+doConfirmDelete=Confirm deletion
+errorDeletingAccount=Error happened while deleting account
+deletingAccountForbidden=You do not have enough permissions to delete your own account, contact admin.
+kerberosNotConfigured=Kerberos Not Configured
+kerberosNotConfiguredTitle=Kerberos Not Configured
+bypassKerberosDetail=Either you are not logged in by Kerberos or your browser is not set up for Kerberos login. Please click continue to login in through other means
+kerberosNotSetUp=Kerberos is not set up. You cannot login.
+registerTitle=Register
+loginAccountTitle=Sign in to your account
+loginTitle=Sign in to {0}
+loginTitleHtml={0}
+impersonateTitle={0} Impersonate User
+impersonateTitleHtml={0} Impersonate User
+realmChoice=Realm
+unknownUser=Unknown user
+loginTotpTitle=Mobile Authenticator Setup
+loginProfileTitle=Update Account Information
+loginIdpReviewProfileTitle=Update Account Information
+loginTimeout=Your login attempt timed out. Login will start from the beginning.
+reauthenticate=Please re-authenticate to continue
+oauthGrantTitle=Grant Access to {0}
+oauthGrantTitleHtml={0}
+oauthGrantInformation=Make sure you trust {0} by learning how {0} will handle your data.
+oauthGrantReview=You could review the
+oauthGrantTos=terms of service.
+oauthGrantPolicy=privacy policy.
+errorTitle=We are sorry...
+errorTitleHtml=We are sorry ...
+emailVerifyTitle=Email verification
+emailForgotTitle=Forgot Your Password?
+updateEmailTitle=Update email
+emailUpdateConfirmationSentTitle=Confirmation email sent
+emailUpdateConfirmationSent=A confirmation email has been sent to {0}. You must follow the instructions of the former to complete the email update.
+emailUpdatedTitle=Email updated
+emailUpdated=The account email has been successfully updated to {0}.
+updatePasswordTitle=Update password
+codeSuccessTitle=Success code
+codeErrorTitle=Error code\: {0}
+displayUnsupported=Requested display type unsupported
+browserRequired=Browser required to login
+browserContinue=Browser required to complete login
+browserContinuePrompt=Open browser and continue login? [y/n]:
+browserContinueAnswer=y
+
+# Transports
+usb=USB
+nfc=NFC
+bluetooth=Bluetooth
+internal=Internal
+unknown=Unknown
+
+termsTitle=Terms and Conditions
+termsText=${msg("logoutConfirmHeader")}
+ + + +
+ <#if logoutConfirm.skipLink>
+ <#else>
+ <#if (client.baseUrl)?has_content>
+
+
+
+
+
+
+ Terms and conditions to be defined
+termsPlainText=Terms and conditions to be defined. + +recaptchaFailed=Invalid Recaptcha +recaptchaNotConfigured=Recaptcha is required, but not configured +consentDenied=Consent denied. + +noAccount=New user? +username=Username +usernameOrEmail=Username or email +firstName=First name +givenName=Given name +fullName=Full name +lastName=Last name +familyName=Family name +email=Email +password=Password +passwordConfirm=Confirm password +passwordNew=New Password +passwordNewConfirm=New Password confirmation +rememberMe=Remember me +authenticatorCode=One-time code +address=Address +street=Street +locality=City or Locality +region=State, Province, or Region +postal_code=Zip or Postal code +country=Country +emailVerified=Email verified +website=Web page +phoneNumber=Phone number +phoneNumberVerified=Phone number verified +gender=Gender +birthday=Birthdate +zoneinfo=Time zone +gssDelegationCredential=GSS Delegation Credential +logoutOtherSessions=Sign out from other devices + +profileScopeConsentText=User profile +emailScopeConsentText=Email address +addressScopeConsentText=Address +phoneScopeConsentText=Phone number +offlineAccessScopeConsentText=Offline Access +samlRoleListScopeConsentText=My Roles +rolesScopeConsentText=User roles + +restartLoginTooltip=Restart login + +loginTotpIntro=You need to set up a One Time Password generator to access this account +loginTotpStep1=Install one of the following applications on your mobile: +loginTotpStep2=Open the application and scan the barcode: +loginTotpStep3=Enter the one-time code provided by the application and click Submit to finish the setup. +loginTotpStep3DeviceName=Provide a Device Name to help you manage your OTP devices. +loginTotpManualStep2=Open the application and enter the key: +loginTotpManualStep3=Use the following configuration values if the application allows setting them: +loginTotpUnableToScan=Unable to scan? +loginTotpScanBarcode=Scan barcode? +loginCredential=Credential +loginOtpOneTime=One-time code +loginTotpType=Type +loginTotpAlgorithm=Algorithm +loginTotpDigits=Digits +loginTotpInterval=Interval +loginTotpCounter=Counter +loginTotpDeviceName=Device Name + +loginTotp.totp=Time-based +loginTotp.hotp=Counter-based + +totpAppFreeOTPName=FreeOTP +totpAppGoogleName=Google Authenticator +totpAppMicrosoftAuthenticatorName=Microsoft Authenticator + +loginChooseAuthenticator=Select login method + +oauthGrantRequest=Do you grant these access privileges? +inResource=in + +oauth2DeviceVerificationTitle=Device Login +verifyOAuth2DeviceUserCode=Enter the code provided by your device and click Submit +oauth2DeviceInvalidUserCodeMessage=Invalid code, please try again. +oauth2DeviceExpiredUserCodeMessage=The code has expired. Please go back to your device and try connecting again. +oauth2DeviceVerificationCompleteHeader=Device Login Successful +oauth2DeviceVerificationCompleteMessage=You may close this browser window and go back to your device. +oauth2DeviceVerificationFailedHeader=Device Login Failed +oauth2DeviceVerificationFailedMessage=You may close this browser window and go back to your device and try connecting again. +oauth2DeviceConsentDeniedMessage=Consent denied for connecting the device. +oauth2DeviceAuthorizationGrantDisabledMessage=Client is not allowed to initiate OAuth 2.0 Device Authorization Grant. The flow is disabled for the client. + +emailVerifyInstruction1=An email with instructions to verify your email address has been sent to your address {0}. +emailVerifyInstruction2=Haven''t received a verification code in your email? +emailVerifyInstruction3=to re-send the email. + +emailLinkIdpTitle=Link {0} +emailLinkIdp1=An email with instructions to link {0} account {1} with your {2} account has been sent to you. +emailLinkIdp2=Haven''t received a verification code in your email? +emailLinkIdp3=to re-send the email. +emailLinkIdp4=If you already verified the email in different browser +emailLinkIdp5=to continue. + +backToLogin=« Back to Login + +emailInstruction=Enter your username or email address and we will send you instructions on how to create a new password. +emailInstructionUsername=Enter your username and we will send you instructions on how to create a new password. + +copyCodeInstruction=Please copy this code and paste it into your application: + +pageExpiredTitle=Page has expired +pageExpiredMsg1=To restart the login process +pageExpiredMsg2=To continue the login process + +personalInfo=Personal Info: +role_admin=Admin +role_realm-admin=Realm Admin +role_create-realm=Create realm +role_create-client=Create client +role_view-realm=View realm +role_view-users=View users +role_view-applications=View applications +role_view-clients=View clients +role_view-events=View events +role_view-identity-providers=View identity providers +role_manage-realm=Manage realm +role_manage-users=Manage users +role_manage-applications=Manage applications +role_manage-identity-providers=Manage identity providers +role_manage-clients=Manage clients +role_manage-events=Manage events +role_view-profile=View profile +role_manage-account=Manage account +role_manage-account-links=Manage account links +role_read-token=Read token +role_offline-access=Offline access +client_account=Account +client_account-console=Account Console +client_security-admin-console=Security Admin Console +client_admin-cli=Admin CLI +client_realm-management=Realm Management +client_broker=Broker + +requiredFields=Required fields + +invalidUserMessage=Invalid username or password. +invalidUsernameMessage=Invalid username. +invalidUsernameOrEmailMessage=Invalid username or email. +invalidPasswordMessage=Invalid password. +invalidEmailMessage=Invalid email address. +accountDisabledMessage=Account is disabled, contact your administrator. +accountTemporarilyDisabledMessage=Account is temporarily disabled; contact your administrator or retry later. +expiredCodeMessage=Login timeout. Please sign in again. +expiredActionMessage=Action expired. Please continue with login now. +expiredActionTokenNoSessionMessage=Action expired. +expiredActionTokenSessionExistsMessage=Action expired. Please start again. +sessionLimitExceeded=There are too many sessions + +missingFirstNameMessage=Please specify first name. +missingLastNameMessage=Please specify last name. +missingEmailMessage=Please specify email. +missingUsernameMessage=Please specify username. +missingPasswordMessage=Please specify password. +missingTotpMessage=Please specify authenticator code. +missingTotpDeviceNameMessage=Please specify device name. +notMatchPasswordMessage=Passwords don''t match. + +error-invalid-value=Invalid value. +error-invalid-blank=Please specify value. +error-empty=Please specify value. +error-invalid-length=Length must be between {1} and {2}. +error-invalid-length-too-short=Minimal length is {1}. +error-invalid-length-too-long=Maximal length is {2}. +error-invalid-email=Invalid email address. +error-invalid-number=Invalid number. +error-number-out-of-range=Number must be between {1} and {2}. +error-number-out-of-range-too-small=Number must have minimal value of {1}. +error-number-out-of-range-too-big=Number must have maximal value of {2}. +error-pattern-no-match=Invalid value. +error-invalid-uri=Invalid URL. +error-invalid-uri-scheme=Invalid URL scheme. +error-invalid-uri-fragment=Invalid URL fragment. +error-user-attribute-required=Please specify this field. +error-invalid-date=Invalid date. +error-user-attribute-read-only=This field is read only. +error-username-invalid-character=Value contains invalid character. +error-person-name-invalid-character=Value contains invalid character. + +invalidPasswordExistingMessage=Invalid existing password. +invalidPasswordBlacklistedMessage=Invalid password: password is blacklisted. +invalidPasswordConfirmMessage=Password confirmation doesn''t match. +invalidTotpMessage=Invalid authenticator code. + +usernameExistsMessage=Username already exists. +emailExistsMessage=Email already exists. + +federatedIdentityExistsMessage=User with {0} {1} already exists. Please login to account management to link the account. +federatedIdentityUnavailableMessage=User {0} authenticated with identity provider {1} does not exist. Please contact your administrator. + +confirmLinkIdpTitle=Account already exists +federatedIdentityConfirmLinkMessage=User with {0} {1} already exists. How do you want to continue? +federatedIdentityConfirmReauthenticateMessage=Authenticate to link your account with {0} +nestedFirstBrokerFlowMessage=The {0} user {1} is not linked to any known user. +confirmLinkIdpReviewProfile=Review profile +confirmLinkIdpContinue=Add to existing account + +configureTotpMessage=You need to set up Mobile Authenticator to activate your account. +configureBackupCodesMessage=You need to set up Backup Codes to activate your account. +updateProfileMessage=You need to update your user profile to activate your account. +updatePasswordMessage=You need to change your password to activate your account. +updateEmailMessage=You need to update your email address to activate your account. +resetPasswordMessage=You need to change your password. +verifyEmailMessage=You need to verify your email address to activate your account. +linkIdpMessage=You need to verify your email address to link your account with {0}. + +emailSentMessage=You should receive an email shortly with further instructions. +emailSendErrorMessage=Failed to send email, please try again later. + +accountUpdatedMessage=Your account has been updated. +accountPasswordUpdatedMessage=Your password has been updated. + +delegationCompleteHeader=Login Successful +delegationCompleteMessage=You may close this browser window and go back to your console application. +delegationFailedHeader=Login Failed +delegationFailedMessage=You may close this browser window and go back to your console application and try logging in again. + +noAccessMessage=No access + +invalidPasswordMinLengthMessage=Invalid password: minimum length {0}. +invalidPasswordMaxLengthMessage=Invalid password: maximum length {0}. +invalidPasswordMinDigitsMessage=Invalid password: must contain at least {0} numerical digits. +invalidPasswordMinLowerCaseCharsMessage=Invalid password: must contain at least {0} lower case characters. +invalidPasswordMinUpperCaseCharsMessage=Invalid password: must contain at least {0} upper case characters. +invalidPasswordMinSpecialCharsMessage=Invalid password: must contain at least {0} special characters. +invalidPasswordNotUsernameMessage=Invalid password: must not be equal to the username. +invalidPasswordNotEmailMessage=Invalid password: must not be equal to the email. +invalidPasswordRegexPatternMessage=Invalid password: fails to match regex pattern(s). +invalidPasswordHistoryMessage=Invalid password: must not be equal to any of last {0} passwords. +invalidPasswordGenericMessage=Invalid password: new password doesn''t match password policies. + +failedToProcessResponseMessage=Failed to process response +httpsRequiredMessage=HTTPS required +realmNotEnabledMessage=Realm not enabled +invalidRequestMessage=Invalid Request +successLogout=You are logged out +failedLogout=Logout failed +unknownLoginRequesterMessage=Unknown login requester +loginRequesterNotEnabledMessage=Login requester not enabled +bearerOnlyMessage=Bearer-only applications are not allowed to initiate browser login +standardFlowDisabledMessage=Client is not allowed to initiate browser login with given response_type. Standard flow is disabled for the client. +implicitFlowDisabledMessage=Client is not allowed to initiate browser login with given response_type. Implicit flow is disabled for the client. +invalidRedirectUriMessage=Invalid redirect uri +unsupportedNameIdFormatMessage=Unsupported NameIDFormat +invalidRequesterMessage=Invalid requester +registrationNotAllowedMessage=Registration not allowed +resetCredentialNotAllowedMessage=Reset Credential not allowed + +permissionNotApprovedMessage=Permission not approved. +noRelayStateInResponseMessage=No relay state in response from identity provider. +insufficientPermissionMessage=Insufficient permissions to link identities. +couldNotProceedWithAuthenticationRequestMessage=Could not proceed with authentication request to identity provider. +couldNotObtainTokenMessage=Could not obtain token from identity provider. +unexpectedErrorRetrievingTokenMessage=Unexpected error when retrieving token from identity provider. +unexpectedErrorHandlingResponseMessage=Unexpected error when handling response from identity provider. +identityProviderAuthenticationFailedMessage=Authentication failed. Could not authenticate with identity provider. +couldNotSendAuthenticationRequestMessage=Could not send authentication request to identity provider. +unexpectedErrorHandlingRequestMessage=Unexpected error when handling authentication request to identity provider. +invalidAccessCodeMessage=Invalid access code. +sessionNotActiveMessage=Session not active. +invalidCodeMessage=An error occurred, please login again through your application. +cookieNotFoundMessage=Cookie not found. Please make sure cookies are enabled in your browser. +insufficientLevelOfAuthentication=The requested level of authentication has not been satisfied. +identityProviderUnexpectedErrorMessage=Unexpected error when authenticating with identity provider +identityProviderMissingStateMessage=Missing state parameter in response from identity provider. +identityProviderInvalidResponseMessage=Invalid response from identity provider. +identityProviderInvalidSignatureMessage=Invalid signature in response from identity provider. +identityProviderNotFoundMessage=Could not find an identity provider with the identifier. +identityProviderLinkSuccess=You successfully verified your email. Please go back to your original browser and continue there with the login. +staleCodeMessage=This page is no longer valid, please go back to your application and sign in again +realmSupportsNoCredentialsMessage=Realm does not support any credential type. +credentialSetupRequired=Cannot login, credential setup required. +identityProviderNotUniqueMessage=Realm supports multiple identity providers. Could not determine which identity provider should be used to authenticate with. +emailVerifiedMessage=Your email address has been verified. +staleEmailVerificationLink=The link you clicked is an old stale link and is no longer valid. Maybe you have already verified your email. +identityProviderAlreadyLinkedMessage=Federated identity returned by {0} is already linked to another user. +confirmAccountLinking=Confirm linking the account {0} of identity provider {1} with your account. +confirmEmailAddressVerification=Confirm validity of e-mail address {0}. +confirmExecutionOfActions=Perform the following action(s) + +locale_ar=\u0639\u0631\u0628\u064A +locale_ca=Catal\u00E0 +locale_cs=\u010Ce\u0161tina +locale_da=Dansk +locale_de=Deutsch +locale_en=English +locale_es=Espa\u00F1ol +locale_fr=Fran\u00E7ais +locale_hu=Magyar +locale_it=Italiano +locale_ja=\u65E5\u672C\u8A9E +locale_lt=Lietuvi\u0173 +locale_nl=Nederlands +locale_no=Norsk +locale_pl=Polski +locale_pt_BR=Portugu\u00EAs (Brasil) +locale_pt-BR=Portugu\u00EAs (Brasil) +locale_ru=\u0420\u0443\u0441\u0441\u043A\u0438\u0439 +locale_sk=Sloven\u010Dina +locale_sv=Svenska +locale_tr=T\u00FCrk\u00E7e +locale_zh-CN=\u4E2D\u6587\u7B80\u4F53 +locale_fi=Suomi + +backToApplication=« Back to Application +missingParameterMessage=Missing parameters\: {0} +clientNotFoundMessage=Client not found. +clientDisabledMessage=Client disabled. +invalidParameterMessage=Invalid parameter\: {0} +alreadyLoggedIn=You are already logged in. +differentUserAuthenticated=You are already authenticated as different user ''{0}'' in this session. Please sign out first. +brokerLinkingSessionExpired=Requested broker account linking, but current session is no longer valid. +proceedWithAction=» Click here to proceed +acrNotFulfilled=Authentication requirements not fulfilled + +requiredAction.CONFIGURE_TOTP=Configure OTP +requiredAction.TERMS_AND_CONDITIONS=Terms and Conditions +requiredAction.UPDATE_PASSWORD=Update Password +requiredAction.UPDATE_PROFILE=Update Profile +requiredAction.VERIFY_EMAIL=Verify Email +requiredAction.CONFIGURE_RECOVERY_AUTHN_CODES=Generate Recovery Codes +requiredAction.webauthn-register-passwordless=Webauthn Register Passwordless + +invalidTokenRequiredActions=Required actions included in the link are not valid + +doX509Login=You will be logged in as\: +clientCertificate=X509 client certificate\: +noCertificate=[No Certificate] + + +pageNotFound=Page not found +internalServerError=An internal server error has occurred + +console-username=Username: +console-password=Password: +console-otp=One Time Password: +console-new-password=New Password: +console-confirm-password=Confirm Password: +console-update-password=Update of your password is required. +console-verify-email=You need to verify your email address. We sent an email to {0} that contains a verification code. Please enter this code into the input below. +console-email-code=Email Code: +console-accept-terms=Accept Terms? [y/n]: +console-accept=y + +# Openshift messages +openshift.scope.user_info=User information +openshift.scope.user_check-access=User access information +openshift.scope.user_full=Full Access +openshift.scope.list-projects=List projects + +# SAML authentication +saml.post-form.title=Authentication Redirect +saml.post-form.message=Redirecting, please wait. +saml.post-form.js-disabled=JavaScript is disabled. We strongly recommend to enable it. Click the button below to continue. +saml.artifactResolutionServiceInvalidResponse=Unable to resolve artifact. + +#authenticators +otp-display-name=Authenticator Application +otp-help-text=Enter a verification code from authenticator application. +password-display-name=Password +password-help-text=Sign in by entering your password. +auth-username-form-display-name=Username +auth-username-form-help-text=Start sign in by entering your username +auth-username-password-form-display-name=Username and password +auth-username-password-form-help-text=Sign in by entering your username and password. + +# Recovery Codes +auth-recovery-authn-code-form-display-name=Recovery Authentication Code +auth-recovery-authn-code-form-help-text=Enter a recovery authentication code from a previously generated list. +auth-recovery-code-info-message=Enter the specified recovery code. +auth-recovery-code-prompt=Recovery code #{0} +auth-recovery-code-header=Login with a recovery authentication code +recovery-codes-error-invalid=Invalid recovery authentication code +recovery-code-config-header=Recovery Authentication Codes +recovery-code-config-warning-title=These recovery codes won't appear again after leaving this page +recovery-code-config-warning-message=Make sure to print, download, or copy them to a password manager and keep them save. Canceling this setup will remove these recovery codes from your account. +recovery-codes-print=Print +recovery-codes-download=Download +recovery-codes-copy=Copy +recovery-codes-copied=Copied +recovery-codes-confirmation-message=I have saved these codes somewhere safe +recovery-codes-action-complete=Complete setup +recovery-codes-action-cancel=Cancel setup +recovery-codes-download-file-header=Keep these recovery codes somewhere safe. +recovery-codes-download-file-description=Recovery codes are single-use passcodes that allow you to sign in to your account if you do not have access to your authenticator. +recovery-codes-download-file-date= These codes were generated on +recovery-codes-label-default=Recovery codes + +# WebAuthn +webauthn-display-name=Security Key +webauthn-help-text=Use your security key to sign in. +webauthn-passwordless-display-name=Security Key +webauthn-passwordless-help-text=Use your security key for passwordless sign in. +webauthn-login-title=Security Key login +webauthn-registration-title=Security Key Registration +webauthn-available-authenticators=Available Security Keys +webauthn-unsupported-browser-text=WebAuthn is not supported by this browser. Try another one or contact your administrator. +webauthn-doAuthenticate=Sign in with Security Key +webauthn-createdAt-label=Created + +# WebAuthn Error +webauthn-error-title=Security Key Error +webauthn-error-registration=Failed to register your Security key.{0} +webauthn-error-api-get=Failed to authenticate by the Security key.
{0} +webauthn-error-different-user=First authenticated user is not the one authenticated by the Security key. +webauthn-error-auth-verification=Security key authentication result is invalid.
{0} +webauthn-error-register-verification=Security key registration result is invalid.
{0} +webauthn-error-user-not-found=Unknown user authenticated by the Security key. + +# Identity provider +identity-provider-redirector=Connect with another Identity Provider +identity-provider-login-label=Or sign in with +idp-email-verification-display-name=Email Verification +idp-email-verification-help-text=Link your account by validating your email. +idp-username-password-form-display-name=Username and password +idp-username-password-form-help-text=Link your account by logging in. + +finalDeletionConfirmation=If you delete your account, it cannot be restored. To keep your account, click Cancel. +irreversibleAction=This action is irreversible +deleteAccountConfirm=Delete account confirmation + +deletingImplies=Deleting your account implies: +errasingData=Erasing all your data +loggingOutImmediately=Logging you out immediately +accountUnusable=Any subsequent use of the application will not be possible with this account +userDeletedSuccessfully=User deleted successfully + +access-denied=Access denied +access-denied-when-idp-auth=Access denied when authenticating with {0} + +frontchannel-logout.title=Logging out +frontchannel-logout.message=You are logging out from following apps +logoutConfirmTitle=Logging out +logoutConfirmHeader=Do you want to logout? +doLogout=Logout + +readOnlyUsernameMessage=You can''t update your username as it is read-only. diff --git a/themes/src/main/resources/theme/unixdog/login/register-user-profile.ftl b/themes/src/main/resources/theme/unixdog/login/register-user-profile.ftl new file mode 100755 index 0000000000..e0d533b89f --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/login/register-user-profile.ftl @@ -0,0 +1,74 @@ +<#import "template.ftl" as layout> +<#import "user-profile-commons.ftl" as userProfileCommons> +<@layout.registrationLayout displayMessage=messagesPerField.exists('global') displayRequiredFields=true; section> + <#if section = "header"> + ${msg("registerTitle")} + <#elseif section = "form"> + + + \ No newline at end of file diff --git a/themes/src/main/resources/theme/unixdog/login/register.ftl b/themes/src/main/resources/theme/unixdog/login/register.ftl new file mode 100755 index 0000000000..db50984798 --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/login/register.ftl @@ -0,0 +1,141 @@ +<#import "template.ftl" as layout> +<@layout.registrationLayout displayMessage=!messagesPerField.existsError('firstName','lastName','email','username','password','password-confirm'); section> + <#if section = "header"> + ${msg("registerTitle")} + <#elseif section = "form"> + + + \ No newline at end of file diff --git a/themes/src/main/resources/theme/unixdog/login/resources/css/main.css b/themes/src/main/resources/theme/unixdog/login/resources/css/main.css new file mode 100644 index 0000000000..ff2d6d6778 --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/login/resources/css/main.css @@ -0,0 +1,209 @@ +body { + font-family: monospace; + margin: 0; + background: #080e08; + color: #f6f6f6; + + display: flex; + flex-direction: column; + min-height: 100vh; +} + +h1, h2 { + color: #4af626; +} + +footer { + padding: 10px; + max-width: 800px; + width: 100%; + background: #3a7920; + color: #f6f6f6; + + margin: auto auto 0; + box-sizing: border-box; +} + +a:link { + color: #2cacb0; +} + +a:visited { + color: #b4778f; +} +@media (prefers-color-scheme: light) { + body { + background: #fcfffc; + color: #211c1b; + } + + h1, h2 { + color: #4c982a; + } + + a:link { + color: #1f7b7e; + } + + a:visited { + color: #7c5263; + } + + textarea { + background: #ffffff; + color: #211c1b; + } +} + +header { + background: linear-gradient( + 90deg, + rgba(255, 0, 0, 1) 0%, + rgba(255, 154, 0, 1) 10%, + rgba(208, 222, 33, 1) 20%, + rgba(79, 220, 74, 1) 30%, + rgba(63, 218, 216, 1) 40%, + rgba(47, 201, 226, 1) 50%, + rgba(28, 127, 238, 1) 60%, + rgba(95, 21, 242, 1) 70%, + rgba(186, 12, 248, 1) 80%, + rgba(251, 7, 217, 1) 90%, + rgba(255, 0, 0, 1) 100% + ); + min-height: 50px; + display: flex; + color: black; + box-sizing: border-box; +} + +#header-content { + max-width: 800px; + margin: auto; + width: 100%; + align-content: center; + flex-direction: row; + display: flex; + padding: 10px; +} +#header-content h1 { + color: black; + margin: auto auto auto 1rem; +} + +#header-content img { + display: inline; +} + +main { + max-width: 800px; + margin: 0 auto; + padding: 10px; + width: 100%; + box-sizing: border-box; +} + + +span.copyleft { + display: inline-block; + transform: rotate(180deg); +} + +footer a:link, footer a:visited { + text-decoration: none; + font-weight: bold; + color: white; +} + +footer a:hover { + text-decoration: underline; +} + + +input { + background: #332c29; + color: #f6f6f6; +} + +textarea { + background: #332c29; + color: #f6f6f6; +} + +textarea.big { + width: 100%; + height: 5em; +} + +.error, .required { + color: #f00; +} + +#nav { + margin: auto 0 auto auto; + display: flex; + flex-direction: row; + flex-wrap: wrap; +} + +#nav a { + display: block; + padding: 10px; +} + +pre { + white-space: pre-wrap; +} + +#header-content a:link { + text-decoration: none; + color: black; +} +#header-content a:visited { + text-decoration: none; + color: black; +} + +#header-content a:hover { + text-decoration: underline; +} + +label.field-with-error { + color: red; +} + +img.stats { + width: 100%; + display: block; +} + +/* Tables */ +table { + border-collapse: collapse; + width: 100%; +} +th, td { + padding: 5px; +} +th { + border-bottom: solid 2px currentColor; +} + +td:first-child { + border-right: solid 2px currentColor; + border-left: none; +} +td { + border-right: solid 2px currentColor; + border-left: solid 2px currentColor; +} +td:last-child { + border-right: none; + border-left: solid 2px currentColor; +} + +/* Responsive */ +.responsive-wrapper { + overflow-x: auto; + width: 100%; +} + diff --git a/themes/src/main/resources/theme/unixdog/login/resources/img/favicon.ico b/themes/src/main/resources/theme/unixdog/login/resources/img/favicon.ico new file mode 100644 index 0000000000..46eafce9bc Binary files /dev/null and b/themes/src/main/resources/theme/unixdog/login/resources/img/favicon.ico differ diff --git a/themes/src/main/resources/theme/unixdog/login/resources/js/base64url.js b/themes/src/main/resources/theme/unixdog/login/resources/js/base64url.js new file mode 100644 index 0000000000..64555bfbd5 --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/login/resources/js/base64url.js @@ -0,0 +1,114 @@ +// for embedded scripts, quoted and modified from https://github.com/swansontec/rfc4648.js by William Swanson +'use strict'; +var base64url = base64url || {}; +(function(base64url) { + + function parse (string, encoding, opts = {}) { + // Build the character lookup table: + if (!encoding.codes) { + encoding.codes = {}; + for (let i = 0; i < encoding.chars.length; ++i) { + encoding.codes[encoding.chars[i]] = i; + } + } + + // The string must have a whole number of bytes: + if (!opts.loose && (string.length * encoding.bits) & 7) { + throw new SyntaxError('Invalid padding'); + } + + // Count the padding bytes: + let end = string.length; + while (string[end - 1] === '=') { + --end; + + // If we get a whole number of bytes, there is too much padding: + if (!opts.loose && !(((string.length - end) * encoding.bits) & 7)) { + throw new SyntaxError('Invalid padding'); + } + } + + // Allocate the output: + const out = new (opts.out || Uint8Array)(((end * encoding.bits) / 8) | 0); + + // Parse the data: + let bits = 0; // Number of bits currently in the buffer + let buffer = 0; // Bits waiting to be written out, MSB first + let written = 0; // Next byte to write + for (let i = 0; i < end; ++i) { + // Read one character from the string: + const value = encoding.codes[string[i]]; + if (value === void 0) { + throw new SyntaxError('Invalid character ' + string[i]); + } + + // Append the bits to the buffer: + buffer = (buffer << encoding.bits) | value; + bits += encoding.bits; + + // Write out some bits if the buffer has a byte's worth: + if (bits >= 8) { + bits -= 8; + out[written++] = 0xff & (buffer >> bits); + } + } + + // Verify that we have received just enough bits: + if (bits >= encoding.bits || 0xff & (buffer << (8 - bits))) { + throw new SyntaxError('Unexpected end of data'); + } + + return out + } + + function stringify (data, encoding, opts = {}) { + const { pad = true } = opts; + const mask = (1 << encoding.bits) - 1; + let out = ''; + + let bits = 0; // Number of bits currently in the buffer + let buffer = 0; // Bits waiting to be written out, MSB first + for (let i = 0; i < data.length; ++i) { + // Slurp data into the buffer: + buffer = (buffer << 8) | (0xff & data[i]); + bits += 8; + + // Write out as much as we can: + while (bits > encoding.bits) { + bits -= encoding.bits; + out += encoding.chars[mask & (buffer >> bits)]; + } + } + + // Partial character: + if (bits) { + out += encoding.chars[mask & (buffer << (encoding.bits - bits))]; + } + + // Add padding characters until we hit a byte boundary: + if (pad) { + while ((out.length * encoding.bits) & 7) { + out += '='; + } + } + + return out + } + + const encoding = { + chars: 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_', + bits: 6 + } + + base64url.decode = function (string, opts) { + return parse(string, encoding, opts); + } + + base64url.encode = function (data, opts) { + return stringify(data, encoding, opts) + } + + return base64url; +}(base64url)); + + diff --git a/themes/src/main/resources/theme/unixdog/login/saml-post-form.ftl b/themes/src/main/resources/theme/unixdog/login/saml-post-form.ftl new file mode 100644 index 0000000000..94b0c30fca --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/login/saml-post-form.ftl @@ -0,0 +1,25 @@ +<#import "template.ftl" as layout> +<@layout.registrationLayout; section> + <#if section = "header"> + ${msg("saml.post-form.title")} + <#elseif section = "form"> + +
${msg("saml.post-form.message")}
+ + + diff --git a/themes/src/main/resources/theme/unixdog/login/select-authenticator.ftl b/themes/src/main/resources/theme/unixdog/login/select-authenticator.ftl new file mode 100644 index 0000000000..769715b832 --- /dev/null +++ b/themes/src/main/resources/theme/unixdog/login/select-authenticator.ftl @@ -0,0 +1,39 @@ +<#import "template.ftl" as layout> +<@layout.registrationLayout displayInfo=false; section> + <#if section = "header" || section = "show-username"> + + <#if section = "header"> + ${msg("loginChooseAuthenticator")} + + <#elseif section = "form"> +
+
+
+
+
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/template.ftl b/themes/src/main/resources/theme/unixdog/login/template.ftl
new file mode 100644
index 0000000000..b5f6a5159d
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/template.ftl
@@ -0,0 +1,162 @@
+<#macro registrationLayout bodyClass="" displayInfo=false displayMessage=true displayRequiredFields=false>
+
+
+
+
+
+
+
+
+ <#if properties.meta?has_content>
+ <#list properties.meta?split(' ') as meta>
+
+
+
+ | Method | +Description | +Action | +
|---|---|---|
| ${msg('${authenticationSelection.displayName}')} | +${msg('${authenticationSelection.helpText}')} | ++ + | +
+
+
+
+ ${kcSanitize(msg("loginTitleHtml",(realm.displayNameHtml!'')))?no_esc}
+ +
+
+
+
+ <#if !(auth?has_content && auth.showUsername() && !auth.showResetCredentials())>
+ <#if displayRequiredFields>
+
+
+
+ <#else>
+
+ * ${msg("requiredFields")}
+
+
+
+ <#nested "header">
+<#nested "header">
+ + <#else> + <#if displayRequiredFields> +
+
+ <#else>
+ <#nested "show-username">
+
+ * ${msg("requiredFields")}
+
+
+ <#nested "show-username">
+
+
+
+ Logging in as: + . + + ${msg("restartLoginTooltip")}. + +
+
+
+
+
+ Logging in as: + . + + ${msg("restartLoginTooltip")}. + +
+
+
+
+
+
+ <#-- App-initiated actions should not see warning messages about the need to complete the action -->
+ <#-- during login. -->
+ <#if displayMessage && message?has_content && (message.type != 'warning' || !isAppInitiatedAction??)>
+
+
+
+ <#nested "form">
+
+ <#if auth?has_content && auth.showTryAnotherWayLink()>
+
+
+
+ <#if displayInfo>
+
+
+
+
+
+ <#nested "info">
+
+
+ ${kcSanitize(msg("termsText"))?no_esc}
+
+
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/theme.properties b/themes/src/main/resources/theme/unixdog/login/theme.properties
new file mode 100644
index 0000000000..c6ef88537d
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/theme.properties
@@ -0,0 +1,4 @@
+
+styles=css/main.css
+
+kcInputErrorMessageClass=error
diff --git a/themes/src/main/resources/theme/unixdog/login/update-email.ftl b/themes/src/main/resources/theme/unixdog/login/update-email.ftl
new file mode 100644
index 0000000000..4c85e5b5da
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/update-email.ftl
@@ -0,0 +1,42 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayMessage=!messagesPerField.existsError('email'); section>
+ <#if section = "header">
+ ${msg("updateEmailTitle")}
+ <#elseif section = "form">
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/update-user-profile.ftl b/themes/src/main/resources/theme/unixdog/login/update-user-profile.ftl
new file mode 100755
index 0000000000..e09f5c3884
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/update-user-profile.ftl
@@ -0,0 +1,28 @@
+<#import "template.ftl" as layout>
+<#import "user-profile-commons.ftl" as userProfileCommons>
+<@layout.registrationLayout displayMessage=messagesPerField.exists('global') displayRequiredFields=true; section>
+ <#if section = "header">
+ ${msg("loginProfileTitle")}
+ <#elseif section = "form">
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/user-profile-commons.ftl b/themes/src/main/resources/theme/unixdog/login/user-profile-commons.ftl
new file mode 100644
index 0000000000..140eea31a8
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/user-profile-commons.ftl
@@ -0,0 +1,187 @@
+<#macro userProfileFormFields>
+ <#assign currentGroup="">
+
+ <#list profile.attributes as attribute>
+
+ <#assign groupName = attribute.group!"">
+ <#if groupName != currentGroup>
+ <#assign currentGroup=groupName>
+ <#if currentGroup != "" >
+
+
+ <#assign groupDisplayHeader=attribute.groupDisplayHeader!"">
+ <#if groupDisplayHeader != "">
+ <#assign groupHeaderText=advancedMsg(attribute.groupDisplayHeader)!groupName>
+ <#else>
+ <#assign groupHeaderText=groupName>
+
+
+
+
+
+ <#nested "beforeField" attribute>
+
+
+
+
+ <#assign groupDisplayDescription=attribute.groupDisplayDescription!"">
+ <#if groupDisplayDescription != "">
+ <#assign groupDescriptionText=advancedMsg(attribute.groupDisplayDescription)!"">
+
+
+
+
+
+
+ <#nested "afterField" attribute>
+
+
+
+<#macro inputFieldByType attribute>
+ <#switch attribute.annotations.inputType!''>
+ <#case 'textarea'>
+ <@textareaTag attribute=attribute/>
+ <#break>
+ <#case 'select'>
+ <#case 'multiselect'>
+ <@selectTag attribute=attribute/>
+ <#break>
+ <#case 'select-radiobuttons'>
+ <#case 'multiselect-checkboxes'>
+ <@inputTagSelects attribute=attribute/>
+ <#break>
+ <#default>
+ <@inputTag attribute=attribute/>
+
+
+
+<#macro inputTag attribute>
+ disabled
+ <#if attribute.autocomplete??>autocomplete="${attribute.autocomplete}"
+ <#if attribute.annotations.inputTypePlaceholder??>placeholder="${attribute.annotations.inputTypePlaceholder}"
+ <#if attribute.annotations.inputTypePattern??>pattern="${attribute.annotations.inputTypePattern}"
+ <#if attribute.annotations.inputTypeSize??>size="${attribute.annotations.inputTypeSize}"
+ <#if attribute.annotations.inputTypeMaxlength??>maxlength="${attribute.annotations.inputTypeMaxlength}"
+ <#if attribute.annotations.inputTypeMinlength??>minlength="${attribute.annotations.inputTypeMinlength}"
+ <#if attribute.annotations.inputTypeMax??>max="${attribute.annotations.inputTypeMax}"
+ <#if attribute.annotations.inputTypeMin??>min="${attribute.annotations.inputTypeMin}"
+ <#if attribute.annotations.inputTypeStep??>step="${attribute.annotations.inputTypeStep}"
+ />
+
+
+<#macro inputTagType attribute>
+ <#compress>
+ <#if attribute.annotations.inputType??>
+ <#if attribute.annotations.inputType?starts_with("html5-")>
+ ${attribute.annotations.inputType[6..]}
+ <#else>
+ ${attribute.annotations.inputType}
+
+ <#else>
+ text
+
+
+
+
+<#macro textareaTag attribute>
+
+
+
+<#macro selectTag attribute>
+
+
+
+<#macro inputTagSelects attribute>
+ <#if attribute.annotations.inputType=='select-radiobuttons'>
+ <#assign inputType='radio'>
+ <#assign classDiv=properties.kcInputClassRadio!>
+ <#assign classInput=properties.kcInputClassRadioInput!>
+ <#assign classLabel=properties.kcInputClassRadioLabel!>
+ <#else>
+ <#assign inputType='checkbox'>
+ <#assign classDiv=properties.kcInputClassCheckbox!>
+ <#assign classInput=properties.kcInputClassCheckboxInput!>
+ <#assign classLabel=properties.kcInputClassCheckboxLabel!>
+
+
+ <#if attribute.annotations.inputOptionsFromValidation?? && attribute.validators[attribute.annotations.inputOptionsFromValidation]?? && attribute.validators[attribute.annotations.inputOptionsFromValidation].options??>
+ <#assign options=attribute.validators[attribute.annotations.inputOptionsFromValidation].options>
+ <#elseif attribute.validators.options?? && attribute.validators.options.options??>
+ <#assign options=attribute.validators.options.options>
+
+
+ <#if options??>
+ <#list options as option>
+
+
+ <#if attribute.required>*
+
+
+ <#if attribute.annotations.inputHelperTextBefore??>
+
+ ${kcSanitize(advancedMsg(attribute.annotations.inputHelperTextBefore))?no_esc}
+
+ <@inputFieldByType attribute=attribute/>
+ <#if messagesPerField.existsError('${attribute.name}')>
+
+ ${kcSanitize(messagesPerField.get('${attribute.name}'))?no_esc}
+
+
+ <#if attribute.annotations.inputHelperTextAfter??>
+ ${kcSanitize(advancedMsg(attribute.annotations.inputHelperTextAfter))?no_esc}
+
+
+ disabled
+ <#if attribute.values?seq_contains(option)>checked
+ />
+
+
+
+
+
+
+
+<#macro selectOptionLabelText attribute option>
+ <#compress>
+ <#if attribute.annotations.inputOptionLabels??>
+ ${advancedMsg(attribute.annotations.inputOptionLabels[option]!option)}
+ <#else>
+ <#if attribute.annotations.inputOptionLabelsI18nPrefix??>
+ ${msg(attribute.annotations.inputOptionLabelsI18nPrefix + '.' + option)}
+ <#else>
+ ${option}
+
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/webauthn-authenticate.ftl b/themes/src/main/resources/theme/unixdog/login/webauthn-authenticate.ftl
new file mode 100644
index 0000000000..a07f7503d8
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/webauthn-authenticate.ftl
@@ -0,0 +1,168 @@
+ <#import "template.ftl" as layout>
+ <@layout.registrationLayout; section>
+ <#if section = "title">
+ title
+ <#elseif section = "header">
+ ${kcSanitize(msg("webauthn-login-title"))?no_esc}
+ <#elseif section = "form">
+
+
+
+
+
+
+
+
+ <#elseif section = "info">
+
+
+
diff --git a/themes/src/main/resources/theme/unixdog/login/webauthn-error.ftl b/themes/src/main/resources/theme/unixdog/login/webauthn-error.ftl
new file mode 100644
index 0000000000..2474a3f6cc
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/webauthn-error.ftl
@@ -0,0 +1,36 @@
+<#import "template.ftl" as layout>
+<@layout.registrationLayout displayMessage=true; section>
+ <#if section = "header">
+ ${kcSanitize(msg("webauthn-error-title"))?no_esc}
+ <#elseif section = "form">
+
+
+
+
+
+
+
+ <#if isAppInitiatedAction??>
+
+
+
+
+
\ No newline at end of file
diff --git a/themes/src/main/resources/theme/unixdog/login/webauthn-register.ftl b/themes/src/main/resources/theme/unixdog/login/webauthn-register.ftl
new file mode 100644
index 0000000000..021e8e91dc
--- /dev/null
+++ b/themes/src/main/resources/theme/unixdog/login/webauthn-register.ftl
@@ -0,0 +1,194 @@
+ <#import "template.ftl" as layout>
+ <@layout.registrationLayout; section>
+ <#if section = "title">
+ title
+ <#elseif section = "header">
+ ${kcSanitize(msg("webauthn-registration-title"))?no_esc}
+ <#elseif section = "form">
+
+
+
+
+
+
+
+
+
+
+
+ <#if !isSetRetry?has_content && isAppInitiatedAction?has_content>
+
+
+
+
+
+ <#if authenticators??>
+
+
+ <#if shouldDisplayAuthenticators?? && shouldDisplayAuthenticators>
+ <#if authenticators.authenticators?size gt 1>
+
+ ${kcSanitize(msg("webauthn-available-authenticators"))?no_esc}
+ + +
+ <#list authenticators.authenticators as authenticator>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ${kcSanitize(msg('${authenticator.label}'))?no_esc}
+
+
+ <#if authenticator.transports?? && authenticator.transports.displayNameProperties?has_content>
+
+ <#list authenticator.transports.displayNameProperties as nameProperty>
+ ${kcSanitize(msg('${nameProperty!}'))?no_esc}
+ <#if nameProperty?has_next>
+ ,
+
+
+
+
+
+
+
+ ${kcSanitize(msg('webauthn-createdAt-label'))?no_esc}
+
+
+ ${kcSanitize(authenticator.createdAt)?no_esc}
+
+
+