License Key Required

No license key entered. Enter or update your key with php artisan news:license <key>, or purchase one at scriptgain.com.

Two Factor

settings.two-factor

All Templates

Status Shipped Default Shipped File resources/views/settings/two-factor.blade.php

settings.two-factor 70 lines

Not Checked Yet

<x-layouts.app title="Two-Factor Auth">
    <x-page-header title="Two-Factor Authentication" icon="shield" subtitle="A time-based code from an authenticator app, in addition to your password.">
        <x-slot:actions>
            <x-button variant="secondary" icon="settings" href="{{ route('settings.index') }}">Settings</x-button>
        </x-slot:actions>
    </x-page-header>

    @if ($enabled)
        <x-card>
            <div class="flex items-center gap-3">
                <span class="inline-flex items-center justify-center w-10 h-10 rounded-lg bg-emerald-50 text-emerald-600 ring-1 ring-emerald-200"><x-icon name="check-circle" class="w-5 h-5" /></span>
                <div>
                    <p class="text-sm font-semibold text-slate-900">Two-factor authentication is on.</p>
                    <p class="text-sm text-slate-500">You'll enter a code from your authenticator app when you sign in.</p>
                </div>
            </div>
            <form method="POST" action="{{ route('settings.2fa.disable') }}" class="mt-6 border-t border-slate-100 pt-5 max-w-md space-y-4">
                @csrf @method('DELETE')
                <x-field label="Confirm Password To Turn Off" for="password" :error="$errors->first('password')">
                    <x-input id="password" name="password" type="password" autocomplete="current-password" required />
                </x-field>
                <x-button type="submit" variant="danger" icon="x">Turn Off 2FA</x-button>
            </form>
        </x-card>
    @elseif ($secret)
        <x-card title="Set Up Your Authenticator">
            <ol class="text-sm text-slate-600 space-y-4 list-decimal list-inside">
                <li>Open your authenticator app (Google Authenticator, Authy, 1Password…).</li>
                <li>Scan this QR code:
                    <div class="mt-3 flex flex-col items-center gap-2">
                        <div id="tfa-qr" data-uri="{{ $uri }}" class="bg-white p-3 rounded-xl ring-1 ring-slate-200 inline-flex"></div>
                        <p class="text-xs text-slate-400">Can’t scan? Enter the key manually below.</p>
                    </div>
                    <div class="mt-3 font-mono text-base tracking-widest bg-slate-50 ring-1 ring-slate-200 rounded-lg px-4 py-3 select-all">{{ trim(chunk_split($secret, 4, ' ')) }}</div>
                    <div class="mt-2 text-xs text-slate-400 break-all select-all">{{ $uri }}</div>
                </li>
                <li>Enter the 6-digit code it shows to confirm:</li>
            </ol>
            <script src="/vendor/qrcode.min.js"></script>
            <script>
                (function () {
                    var el = document.getElementById('tfa-qr');
                    if (el && window.QRCode && !el.hasChildNodes()) {
                        new QRCode(el, { text: el.dataset.uri, width: 176, height: 176, correctLevel: QRCode.CorrectLevel.M });
                    }
                })();
            </script>
            <form method="POST" action="{{ route('settings.2fa.confirm') }}" class="mt-5 flex items-end gap-3 max-w-sm">
                @csrf
                <x-field label="Code" for="code" :error="$errors->first('code')" class="flex-1">
                    <x-input id="code" name="code" inputmode="numeric" autocomplete="one-time-code" placeholder="123456" autofocus data-lpignore="true" />
                </x-field>
                <x-button type="submit" icon="check">Confirm &amp; Enable</x-button>
            </form>
        </x-card>
    @else
        <x-card>
            <div class="flex flex-wrap items-center justify-between gap-4">
                <div class="max-w-md">
                    <p class="text-sm font-semibold text-slate-900">Add an extra layer of security.</p>
                    <p class="text-sm text-slate-500 mt-1">You'll need your password and a rotating 6-digit code to sign in.</p>
                </div>
                <form method="POST" action="{{ route('settings.2fa.enable') }}">@csrf
                    <x-button type="submit" icon="shield">Enable 2FA</x-button>
                </form>
            </div>
        </x-card>
    @endif
</x-layouts.app>

Change Note

Optional. Shown in the version history so the next person knows why.

Saving runs the same check. An invalid template is refused, not stored.

Compiled PHP

What Blade turns your template into. This is what the syntax check parses.

Loading…

Available Variables And Components

A guide to what this template can use, derived from the shipped source. Click any item to insert it at your cursor. It is a helpful reference, not a runtime guarantee.

Always Available

Shared with the admin panel by the staff layout.

Validation error bag. Always present. Pairs with @error('field').

The admin sidebar navigation structure.

Sub-items of the currently open nav group.

Breadcrumb trail for the current page.

Signed-in staffer's initials, for the avatar.

Signed-in staffer's name.

Signed-in staffer's email address.

The staffer's role, e.g. "Administrator".

True when the signed-in staffer is an administrator.

Number of open service requests, for the badge.

Number of unread form submissions, for the badge.

The configured admin-shell width class.

URL of the uploaded site logo, or null.

URL of the uploaded favicon, or null.

In This Template

Enabled.

Secret.

Uri.

Drop any of these in. Click to insert the opening tag at your cursor.

General

type, info, title

initials, src, name, size, md

color, neutral, dot

action, label, Record, modal

variant, primary, size, md, href, …

title, subtitle, padding, flush

name, action, method, POST, title, …

action, name, title, message, confirm, …

href, icon, danger

align, right, width

icon, folder, title, description

label, for, hint, error, required

href, icon, title, variant, secondary, …

name

type, text

name, title, subtitle, icon, tone, …

href, icon, active

title, subtitle, icon, back

title, subtitle, href, linkLabel

ids

id, label, Row

items

label, value, icon, trend, trendColor, …

color, neutral, pulse, label

name

flush

tabs, default

name, checked, label, description

Admin Panel

title, message, icon, folder, href, …

tree, active, rootLabel, rootHref

title, subtitle, icon, edit, action, …

title, icon, folder, subtitle, records, …

search, placeholder, createHref, createLabel

edit, delete, preview, name, title, …

record, kind, Page

Layouts

title, shellMaxWidth

title, description, heroless, maxWidth

Records

name, action, reference, trigger, icon

Site (Public)

href, title, description, icon, meta, …

title, message, icon, folder

title, subtitle, eyebrow, icon, crumbs, …

supportEmail, supportPhone

disclaimer, takedownContact, retentionDays, compact

title, subtitle, href, linkLabel, tone, …

maxWidth

Common Blade

Print a value, safely escaped. The default choice.

Print raw HTML. Only for content you trust.

Show something conditionally.

Loop over a collection.

Loop, with a fallback when the collection is empty.

Show a validation message for a field.

A small block of PHP. Never on line 1. Keep logic out of templates.

A comment that never reaches the browser.

Civic Helpers

Build a URL to a named route, e.g. a department page.

Link to a single news post.

Turn a stored upload path into a public URL.

A cache-busted URL for a bundled asset.

Read a config value, e.g. the site width class.

Build an absolute URL to a path.

No History Yet

Every save, revert, and reset of this template is recorded here, with a one-click way back to any of them.

The Template That Shipped With The Product

Read only. This is what Reset To Default puts back.

<x-layouts.app title="Two-Factor Auth">
    <x-page-header title="Two-Factor Authentication" icon="shield" subtitle="A time-based code from an authenticator app, in addition to your password.">
        <x-slot:actions>
            <x-button variant="secondary" icon="settings" href="{{ route('settings.index') }}">Settings</x-button>
        </x-slot:actions>
    </x-page-header>

    @if ($enabled)
        <x-card>
            <div class="flex items-center gap-3">
                <span class="inline-flex items-center justify-center w-10 h-10 rounded-lg bg-emerald-50 text-emerald-600 ring-1 ring-emerald-200"><x-icon name="check-circle" class="w-5 h-5" /></span>
                <div>
                    <p class="text-sm font-semibold text-slate-900">Two-factor authentication is on.</p>
                    <p class="text-sm text-slate-500">You'll enter a code from your authenticator app when you sign in.</p>
                </div>
            </div>
            <form method="POST" action="{{ route('settings.2fa.disable') }}" class="mt-6 border-t border-slate-100 pt-5 max-w-md space-y-4">
                @csrf @method('DELETE')
                <x-field label="Confirm Password To Turn Off" for="password" :error="$errors->first('password')">
                    <x-input id="password" name="password" type="password" autocomplete="current-password" required />
                </x-field>
                <x-button type="submit" variant="danger" icon="x">Turn Off 2FA</x-button>
            </form>
        </x-card>
    @elseif ($secret)
        <x-card title="Set Up Your Authenticator">
            <ol class="text-sm text-slate-600 space-y-4 list-decimal list-inside">
                <li>Open your authenticator app (Google Authenticator, Authy, 1Password…).</li>
                <li>Scan this QR code:
                    <div class="mt-3 flex flex-col items-center gap-2">
                        <div id="tfa-qr" data-uri="{{ $uri }}" class="bg-white p-3 rounded-xl ring-1 ring-slate-200 inline-flex"></div>
                        <p class="text-xs text-slate-400">Can’t scan? Enter the key manually below.</p>
                    </div>
                    <div class="mt-3 font-mono text-base tracking-widest bg-slate-50 ring-1 ring-slate-200 rounded-lg px-4 py-3 select-all">{{ trim(chunk_split($secret, 4, ' ')) }}</div>
                    <div class="mt-2 text-xs text-slate-400 break-all select-all">{{ $uri }}</div>
                </li>
                <li>Enter the 6-digit code it shows to confirm:</li>
            </ol>
            <script src="/vendor/qrcode.min.js"></script>
            <script>
                (function () {
                    var el = document.getElementById('tfa-qr');
                    if (el && window.QRCode && !el.hasChildNodes()) {
                        new QRCode(el, { text: el.dataset.uri, width: 176, height: 176, correctLevel: QRCode.CorrectLevel.M });
                    }
                })();
            </script>
            <form method="POST" action="{{ route('settings.2fa.confirm') }}" class="mt-5 flex items-end gap-3 max-w-sm">
                @csrf
                <x-field label="Code" for="code" :error="$errors->first('code')" class="flex-1">
                    <x-input id="code" name="code" inputmode="numeric" autocomplete="one-time-code" placeholder="123456" autofocus data-lpignore="true" />
                </x-field>
                <x-button type="submit" icon="check">Confirm &amp; Enable</x-button>
            </form>
        </x-card>
    @else
        <x-card>
            <div class="flex flex-wrap items-center justify-between gap-4">
                <div class="max-w-md">
                    <p class="text-sm font-semibold text-slate-900">Add an extra layer of security.</p>
                    <p class="text-sm text-slate-500 mt-1">You'll need your password and a rotating 6-digit code to sign in.</p>
                </div>
                <form method="POST" action="{{ route('settings.2fa.enable') }}">@csrf
                    <x-button type="submit" icon="shield">Enable 2FA</x-button>
                </form>
            </div>
        </x-card>
    @endif
</x-layouts.app>

Blade In One Screen

The directives you will use most.

{{ $variable }}

Print a value, escaped. Safe by default.

{!! $html !!}

Print raw HTML. Only for content you trust.

@if / @else / @endif

Show something conditionally.

@foreach / @endforeach

Loop over a collection.

<x-card>

Use a shared component. Every component in Shared Components is available.

{{-- comment --}}

A comment that never reaches the browser.

House Rules

Follow these and your edits will survive updates.

Never start line 1 with @php. Blade mis-parses it and the page fails. The editor refuses to save it.
Keep logic out of templates. If you need a calculation, it belongs in a composer or component class, not here.
The shipped file is never modified. Reset To Default always gets you back.
Every save is versioned. You can revert to any earlier version in one click.
Press Tab inside the editor to indent rather than jump to the next field.