From 9bab708e6e48bb4aa1156b7a8c3ef71a17253241 Mon Sep 17 00:00:00 2001
From: Jens Langhammer <jens.langhammer@beryju.org>
Date: Sat, 27 Mar 2021 22:27:32 +0100
Subject: [PATCH] web/flows/authenticator_validate: auto-select TOTP device
 when password manager prefills it

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
---
 .../AuthenticatorValidateStage.ts              | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/web/src/flows/stages/authenticator_validate/AuthenticatorValidateStage.ts b/web/src/flows/stages/authenticator_validate/AuthenticatorValidateStage.ts
index 21c49bbf2..e048cf178 100644
--- a/web/src/flows/stages/authenticator_validate/AuthenticatorValidateStage.ts
+++ b/web/src/flows/stages/authenticator_validate/AuthenticatorValidateStage.ts
@@ -11,6 +11,7 @@ import AKGlobal from "../../../authentik.css";
 import { BaseStage, StageHost } from "../base";
 import "./AuthenticatorValidateStageWebAuthn";
 import "./AuthenticatorValidateStageCode";
+import { PasswordManagerPrefill } from "../identification/IdentificationStage";
 
 export enum DeviceClasses {
     STATIC = "static",
@@ -83,6 +84,17 @@ export class AuthenticatorValidateStage extends BaseStage implements StageHost {
                         <small>${gettext("Use a security key to prove your identity.")}</small>
                     </div>`;
             case DeviceClasses.TOTP:
+                // TOTP is a bit special, assuming that TOTP is allowed from the backend,
+                // and we have a pre-filled value from the password manager,
+                // directly set the the TOTP device Challenge as active.
+                if (PasswordManagerPrefill.totp) {
+                    console.debug("authentik/stages/authenticator_validate: found prefill totp code, selecting totp challenge");
+                    this.selectedDeviceChallenge = deviceChallenge;
+                    // Delay the update as a re-render isn't triggered from here
+                    setTimeout(() => {
+                        this.requestUpdate();
+                    }, 100);
+                }
                 return html`<i class="fas fa-clock"></i>
                     <div class="right">
                         <p>${gettext("Traditional authenticator")}</p>
@@ -141,9 +153,9 @@ export class AuthenticatorValidateStage extends BaseStage implements StageHost {
     render(): TemplateResult {
         if (!this.challenge) {
             return html`<ak-empty-state
-    ?loading="${true}"
-    header=${gettext("Loading")}>
-</ak-empty-state>`;
+                ?loading="${true}"
+                header=${gettext("Loading")}>
+            </ak-empty-state>`;
         }
         // User only has a single device class, so we don't show a picker
         if (this.challenge?.device_challenges.length === 1) {