Add support for enabling TOTP

[Alan Baghumian]

Hello OpenStack Team!

OpenStack Bobcat introduced support for TOTP (Time Based One Time Passwords) in Horizon leveraging an existing feature in Keystone.

Unfortunately as of today this issue has not been implemented as a native OpenStack Dashboard Charm configuration option and would be a great addition.

I'm opening this Launchpad bug to request this new feature to be added.

Thanks much,
Alan

(1) https://www.openstack.org/blog/new-in-openstack-bobcat-horizon-team-introduces-time-based-one-time-password-totp-authentication-support/

[Alex Kavanagh (ajkavanagh)]

It should be a fairly simple addition to the charm, but may require backporting to yoga to be more widely available.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/charm-openstack-dashboard/+/913991

[Carlos Bravo (bravocarlos)]

Hi, I've submitted the following patch for review: https://review.opendev.org/c/openstack/charm-openstack-dashboard/+/913991.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/charm-openstack-dashboard/+/914030

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/charm-openstack-dashboard/+/913991
Committed: https://opendev.org/openstack/charm-openstack-dashboard/commit/ab66a192f46f375037d951587e9fb8bc03040830
Submitter: "Zuul (22348)"
Branch: master

commit ab66a192f46f375037d951587e9fb8bc03040830
Author: Carlos Bravo <email address hidden>
Date: Fri Mar 22 10:52:25 2024 -0400

    Added OPENSTACK_KEYSTONE_MFA_TOTP_ENABLED to config options

    Starting from Openstack Bobcat (2023.2) Multi Factor Authentication
    was added for Horizon. This change introduced a new variable called
    OPENSTACK_KEYSTONE_MFA_TOTP_ENABLED, which if set to True will display
    a new form requesting for the user's TOTP code for MFA enabled users.

    This change provides the missing OPENSTACK_KEYSTONE_MFA_TOTP_ENABLED
    config option for the charm, allowing the user to enable from the
    charm's configuration. If the value is set to True, the new bobcat
    template will render the following values:
    OPENSTACK_KEYSTONE_MFA_TOTP_ENABLED = True

    AUTHENTICATION_PLUGINS = [
        'openstack_auth.plugin.totp.TotpPlugin',
        'openstack_auth.plugin.password.PasswordPlugin',
        'openstack_auth.plugin.token.TokenPlugin'
    ]

    Closes-Bug: #2058689
    Change-Id: Ifedf587356693b58612b1fc4d7404f0f446158ce