debian-mirror-gitlab/app/views/admin/application_settings/_signin.html.haml

= form_for @application_setting, url: general_admin_application_settings_path(anchor: 'js-signin-settings'), html: { class: 'fieldset-form', id: 'signin-settings' } do |f|
  = form_errors(@application_setting)

  %fieldset
    .form-group
      .form-check
        = f.check_box :password_authentication_enabled_for_web, class: 'form-check-input'
        = f.label :password_authentication_enabled_for_web, class: 'form-check-label' do
          = _('Password authentication enabled for web interface')
          .form-text.text-muted
            = _('When disabled, an external authentication provider must be used.')
    .form-group
      .form-check
        = f.check_box :password_authentication_enabled_for_git, class: 'form-check-input'
        = f.label :password_authentication_enabled_for_git, class: 'form-check-label' do
          = _('Password authentication enabled for Git over HTTP(S)')
          .form-text.text-muted
            When disabled, a Personal Access Token
            - if Gitlab::Auth::Ldap::Config.enabled?
              or LDAP password
            must be used to authenticate.
    - if omniauth_enabled? && button_based_providers.any?
      %fieldset.form-group
        %legend.gl-font-base.gl-mb-3.gl-border-none.gl-font-weight-bold= _('Enabled OAuth sign-in sources')
        = hidden_field_tag 'application_setting[enabled_oauth_sign_in_sources][]'
        - oauth_providers_checkboxes.each do |source|
          = source
    .form-group
      = f.label :two_factor_authentication, _('Two-factor authentication'), class: 'label-bold'
      .form-check
        = f.check_box :require_two_factor_authentication, class: 'form-check-input'
        = f.label :require_two_factor_authentication, class: 'form-check-label' do
          = _('Require all users to set up two-factor authentication')
    .form-group
      = f.label :admin_mode, _('Admin Mode'), class: 'label-bold'
      = sprite_icon('lock', css_class: 'gl-icon')
      .form-check
        = f.check_box :admin_mode, class: 'form-check-input'
        = f.label :admin_mode, class: 'form-check-label' do
          = _('Require additional authentication for administrative tasks')
        .form-text.text-muted
          = link_to _('Learn more.'), help_page_path('user/admin_area/settings/sign_in_restrictions', anchor: 'admin-mode')
    .form-group
      = f.label :unknown_sign_in, _('Email notification for unknown sign-ins'), class: 'label-bold'
      .form-check
        = f.check_box :notify_on_unknown_sign_in, class: 'form-check-input'
        = f.label :notify_on_unknown_sign_in, class: 'form-check-label' do
          = _('Notify users by email when sign-in location is not recognized')
          = link_to sprite_icon('question-o'),
          'https://docs.gitlab.com/ee/user/profile/unknown_sign_in_notification.html',
          target: '_blank'
    .form-group
      = f.label :two_factor_authentication, _('Two-factor grace period (hours)'), class: 'label-bold'
      = f.number_field :two_factor_grace_period, min: 0, class: 'form-control gl-form-input', placeholder: '0'
      .form-text.text-muted= _('Amount of time (in hours) that users are allowed to skip forced configuration of two-factor authentication')
    .form-group
      = f.label :home_page_url, _('Home page URL'), class: 'label-bold'
      = f.text_field :home_page_url, class: 'form-control gl-form-input', placeholder: 'http://company.example.com', :'aria-describedby' => 'home_help_block'
      %span.form-text.text-muted#home_help_block= _("We will redirect non-logged in users to this page")
    .form-group
      = f.label :after_sign_out_path, _('After sign-out path'), class: 'label-bold'
      = f.text_field :after_sign_out_path, class: 'form-control gl-form-input', placeholder: 'http://company.example.com', :'aria-describedby' => 'after_sign_out_path_help_block'
      %span.form-text.text-muted#after_sign_out_path_help_block= _("We will redirect users to this page after they sign out")
    .form-group
      = f.label :sign_in_text, _('Sign-in text'), class: 'label-bold'
      = f.text_area :sign_in_text, class: 'form-control gl-form-input', rows: 4
      .form-text.text-muted Markdown enabled
  = f.submit _('Save changes'), class: "gl-button btn btn-confirm"