From aa5042f2d9eed32b464a021cfd52b044252a96de Mon Sep 17 00:00:00 2001
From: Lorenz Ulrich <lorenz.ulrich@visol.ch>
Date: Fri, 12 Jan 2024 18:28:49 +0100
Subject: [PATCH 1/6] TASK: Change module icon to qrcode

---
 Configuration/Settings.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Configuration/Settings.yaml b/Configuration/Settings.yaml
index 79954cd..2ce3fb8 100644
--- a/Configuration/Settings.yaml
+++ b/Configuration/Settings.yaml
@@ -10,7 +10,7 @@ Neos:
             controller: 'Sandstorm\NeosTwoFactorAuthentication\Controller\BackendController'
             label: 'Sandstorm.NeosTwoFactorAuthentication:Backend:module.label'
             description: 'Sandstorm.NeosTwoFactorAuthentication:Backend:module.description'
-            icon: 'fas fa-lock'
+            icon: 'fas fa-qrcode'
 
     userInterface:
       translation:

From 24db5ff49ce78927a775aacee6a353590818ff5f Mon Sep 17 00:00:00 2001
From: Lorenz Ulrich <lorenz.ulrich@visol.ch>
Date: Fri, 12 Jan 2024 18:30:53 +0100
Subject: [PATCH 2/6] TASK: Use own component for login flash messages and
 style them

---
 Configuration/Settings.yaml                      |  4 ++++
 .../Components/LoginFlashMessages.fusion         |  9 +++++++++
 .../Pages/SetupSecondFactorPage.fusion           |  3 +--
 Resources/Public/Styles/Login.css                | 16 ++++++++++++++++
 4 files changed, 30 insertions(+), 2 deletions(-)
 create mode 100644 Resources/Private/Fusion/Presentation/Components/LoginFlashMessages.fusion
 create mode 100644 Resources/Public/Styles/Login.css

diff --git a/Configuration/Settings.yaml b/Configuration/Settings.yaml
index 2ce3fb8..5e6c71d 100644
--- a/Configuration/Settings.yaml
+++ b/Configuration/Settings.yaml
@@ -18,6 +18,10 @@ Neos:
           'Sandstorm.NeosTwoFactorAuthentication':
             - '*'
 
+      backendLoginForm:
+        stylesheets:
+          'Sandstorm.NeosTwoFactorAuthentication:AdditionalStyles': 'resource://Sandstorm.NeosTwoFactorAuthentication/Public/Styles/Login.css'
+
   Flow:
     http:
       middlewares:
diff --git a/Resources/Private/Fusion/Presentation/Components/LoginFlashMessages.fusion b/Resources/Private/Fusion/Presentation/Components/LoginFlashMessages.fusion
new file mode 100644
index 0000000..9b22ac0
--- /dev/null
+++ b/Resources/Private/Fusion/Presentation/Components/LoginFlashMessages.fusion
@@ -0,0 +1,9 @@
+prototype(Sandstorm.NeosTwoFactorAuthentication:Component.LoginFlashMessages) < prototype(Neos.Fusion:Component) {
+    flashMessages = ${[]}
+
+    renderer = afx`
+        <Neos.Fusion:Loop items={props.flashMessages} itemName="flashMessage">
+            <div class={'neos-two-factor-flashmessage neos-two-factor-flashmessage-' + String.toLowerCase(flashMessage.severity)}>{flashMessage}</div>
+        </Neos.Fusion:Loop>
+    `
+}
diff --git a/Resources/Private/Fusion/Presentation/Pages/SetupSecondFactorPage.fusion b/Resources/Private/Fusion/Presentation/Pages/SetupSecondFactorPage.fusion
index 6aa7d07..009043d 100644
--- a/Resources/Private/Fusion/Presentation/Pages/SetupSecondFactorPage.fusion
+++ b/Resources/Private/Fusion/Presentation/Pages/SetupSecondFactorPage.fusion
@@ -75,10 +75,9 @@ prototype(Sandstorm.NeosTwoFactorAuthentication:Page.SetupSecondFactorPage) < pr
                                 </h1>
 
                                 <div class="neos-login-body neos">
-                                    <Sandstorm.NeosTwoFactorAuthentication:Component.FlashMessages flashMessages={props.flashMessages} />
+                                    <Sandstorm.NeosTwoFactorAuthentication:Component.LoginFlashMessages flashMessages={props.flashMessages} />
                                     <Neos.Fusion.Form:Form form.target.action="setupSecondFactor">
                                         <Neos.Fusion.Form:Hidden field.name="secret" field.value={secret}/>
-
                                         <div class="neos-control-group">
                                             <img src={qrCode} style="width: 100%; max-width: 400px"/>
                                         </div>
diff --git a/Resources/Public/Styles/Login.css b/Resources/Public/Styles/Login.css
new file mode 100644
index 0000000..ab42dda
--- /dev/null
+++ b/Resources/Public/Styles/Login.css
@@ -0,0 +1,16 @@
+.neos-two-factor-flashmessage {
+  font-size: 13px;
+  line-height: 1.4;
+  padding: 8px;
+  color: #fff;
+  text-align: center;
+  margin-bottom: 10px;
+}
+
+.neos-two-factor-flashmessage-warning {
+  background-color: #F89406;
+}
+
+.neos-two-factor-flashmessage-info {
+  background-color: #5bc0de;
+}

From fad8c372826c939abcf09306a52da82a5261e9ed Mon Sep 17 00:00:00 2001
From: Lorenz Ulrich <lorenz.ulrich@visol.ch>
Date: Fri, 12 Jan 2024 18:31:15 +0100
Subject: [PATCH 3/6] FIX: Correctly configure severity in FlashMessages

---
 .../Private/Fusion/Presentation/Components/FlashMessages.fusion | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Resources/Private/Fusion/Presentation/Components/FlashMessages.fusion b/Resources/Private/Fusion/Presentation/Components/FlashMessages.fusion
index 9795ca9..8de18ea 100644
--- a/Resources/Private/Fusion/Presentation/Components/FlashMessages.fusion
+++ b/Resources/Private/Fusion/Presentation/Components/FlashMessages.fusion
@@ -4,7 +4,7 @@ prototype(Sandstorm.NeosTwoFactorAuthentication:Component.FlashMessages) < proto
     renderer = afx`
         <ul id="neos-notifications-inline">
             <Neos.Fusion:Loop items={props.flashMessages} itemName="flashMessage">
-                <li data-type={String.toLowerCase(props.flashMessage.severity)}>{flashMessage}</li>
+                <li data-type={String.toLowerCase(flashMessage.severity)}>{flashMessage}</li>
             </Neos.Fusion:Loop>
         </ul>
     `

From 3dd98ac0f34d9cb1201e90799440423ecdae2dc6 Mon Sep 17 00:00:00 2001
From: Lorenz Ulrich <lorenz.ulrich@visol.ch>
Date: Fri, 12 Jan 2024 18:32:07 +0100
Subject: [PATCH 4/6] TASK: Use translator for all labels, adjust translations

* Reformatted XLF files to use two spaces consistently
* Make language less "violent"
---
 Classes/Controller/BackendController.php      | 60 ++++++++++-
 Classes/Controller/LoginController.php        | 52 +++++++++-
 .../Components/SecondFactorList.fusion        |  6 +-
 Resources/Private/Translations/en/Backend.xlf | 99 ++++++++++++-------
 Resources/Private/Translations/en/Main.xlf    | 24 +++--
 5 files changed, 185 insertions(+), 56 deletions(-)

diff --git a/Classes/Controller/BackendController.php b/Classes/Controller/BackendController.php
index fd820fa..9686f09 100644
--- a/Classes/Controller/BackendController.php
+++ b/Classes/Controller/BackendController.php
@@ -4,6 +4,7 @@
 
 use Neos\Error\Messages\Message;
 use Neos\Flow\Annotations as Flow;
+use Neos\Flow\I18n\Translator;
 use Neos\Flow\Mvc\Exception\StopActionException;
 use Neos\Flow\Mvc\FlashMessage\FlashMessageService;
 use Neos\Flow\Persistence\Exception\IllegalObjectTypeException;
@@ -61,6 +62,12 @@ class BackendController extends AbstractModuleController
      */
     protected $tOTPService;
 
+    /**
+     * @Flow\Inject
+     * @var Translator
+     */
+    protected $translator;
+
     protected $defaultViewObjectName = FusionView::class;
 
     /**
@@ -130,7 +137,18 @@ public function createAction(string $secret, string $secondFactorFromApp): void
         $isValid = TOTPService::checkIfOtpIsValid($secret, $secondFactorFromApp);
 
         if (!$isValid) {
-            $this->addFlashMessage('Submitted OTP was not correct', '', Message::SEVERITY_WARNING);
+            $this->addFlashMessage(
+                $this->translator->translateById(
+                    'module.new.flashMessage.submittedOtpIncorrect',
+                    [],
+                    null,
+                    null,
+                    'Backend',
+                    'Sandstorm.NeosTwoFactorAuthentication'
+                ),
+                '',
+                Message::SEVERITY_WARNING
+            );
             $this->redirect('new');
         }
 
@@ -138,7 +156,16 @@ public function createAction(string $secret, string $secondFactorFromApp): void
 
         $this->secondFactorSessionStorageService->setAuthenticationStatus(AuthenticationStatus::AUTHENTICATED);
 
-        $this->addFlashMessage('Successfully created otp');
+        $this->addFlashMessage(
+            $this->translator->translateById(
+                'module.new.flashMessage.successfullyRegisteredOtp',
+                [],
+                null,
+                null,
+                'Backend',
+                'Sandstorm.NeosTwoFactorAuthentication'
+            )
+        );
         $this->redirect('index');
     }
 
@@ -159,14 +186,37 @@ public function deleteAction(SecondFactor $secondFactor): void
                 && count($this->secondFactorRepository->findByAccount($account)) <= 1
             ) {
                 $this->addFlashMessage(
-                    'Can not remove last second factor! Second factor is enforced, you need at least one!',
-                    'Error',
+                    $this->translator->translateById(
+                        'module.index.delete.flashMessage.cannotRemoveLastSecondFactor',
+                        [],
+                        null,
+                        null,
+                        'Backend',
+                        'Sandstorm.NeosTwoFactorAuthentication'
+                    ),
+                    $this->translator->translateById(
+                        'module.index.delete.flashMessage.errorHeader',
+                        [],
+                        null,
+                        null,
+                        'Backend',
+                        'Sandstorm.NeosTwoFactorAuthentication'
+                    ),
                     Message::SEVERITY_ERROR
                 );
             } else {
                 $this->secondFactorRepository->remove($secondFactor);
                 $this->persistenceManager->persistAll();
-                $this->addFlashMessage('Second factor was deleted');
+                $this->addFlashMessage(
+                    $this->translator->translateById(
+                        'module.index.delete.flashMessage.secondFactorDeleted',
+                        [],
+                        null,
+                        null,
+                        'Backend',
+                        'Sandstorm.NeosTwoFactorAuthentication'
+                    )
+                );
             }
         }
 
diff --git a/Classes/Controller/LoginController.php b/Classes/Controller/LoginController.php
index de2ae3f..599feea 100644
--- a/Classes/Controller/LoginController.php
+++ b/Classes/Controller/LoginController.php
@@ -10,6 +10,7 @@
 use Neos\Flow\Annotations as Flow;
 use Neos\Flow\Configuration\ConfigurationManager;
 use Neos\Flow\Configuration\Exception\InvalidConfigurationTypeException;
+use Neos\Flow\I18n\Translator;
 use Neos\Flow\Mvc\Controller\ActionController;
 use Neos\Flow\Mvc\Exception\StopActionException;
 use Neos\Flow\Mvc\FlashMessage\FlashMessageService;
@@ -75,6 +76,12 @@ class LoginController extends ActionController
      */
     protected $tOTPService;
 
+    /**
+     * @Flow\Inject
+     * @var Translator
+     */
+    protected $translator;
+
     /**
      * This action decides which tokens are already authenticated
      * and decides which is next to authenticate
@@ -109,8 +116,25 @@ public function checkSecondFactorAction(string $otp): void
         if ($isValidOtp) {
             $this->secondFactorSessionStorageService->setAuthenticationStatus(AuthenticationStatus::AUTHENTICATED);
         } else {
-            // FIXME: not visible in View!
-            $this->addFlashMessage('Invalid OTP!', 'Error', Message::SEVERITY_ERROR);
+            $this->addFlashMessage(
+                $this->translator->translateById(
+                    'login.flashMessage.invalidOtp',
+                    [],
+                    null,
+                    null,
+                    'Main',
+                    'Sandstorm.NeosTwoFactorAuthentication'
+                ),
+                $this->translator->translateById(
+                    'login.flashMessage.errorHeader',
+                    [],
+                    null,
+                    null,
+                    'Main',
+                    'Sandstorm.NeosTwoFactorAuthentication'
+                ),
+                Message::SEVERITY_ERROR
+            );
         }
 
         $originalRequest = $this->securityContext->getInterceptedRequest();
@@ -161,7 +185,18 @@ public function createSecondFactorAction(string $secret, string $secondFactorFro
         $isValid = TOTPService::checkIfOtpIsValid($secret, $secondFactorFromApp);
 
         if (!$isValid) {
-            $this->addFlashMessage('Submitted OTP was not correct.', '', Message::SEVERITY_WARNING);
+            $this->addFlashMessage(
+                $this->translator->translateById(
+                    'login.flashMessage.submittedOtpIncorrect',
+                    [],
+                    null,
+                    null,
+                    'Main',
+                    'Sandstorm.NeosTwoFactorAuthentication'
+                ),
+                '',
+                Message::SEVERITY_WARNING
+            );
             $this->redirect('setupSecondFactor');
         }
 
@@ -169,7 +204,16 @@ public function createSecondFactorAction(string $secret, string $secondFactorFro
 
         $this->secondFactorRepository->createSecondFactorForAccount($secret, $account);
 
-        $this->addFlashMessage('Successfully created otp.');
+        $this->addFlashMessage(
+            $this->translator->translateById(
+                'login.flashMessage.successfullyRegisteredOtp',
+                [],
+                null,
+                null,
+                'Main',
+                'Sandstorm.NeosTwoFactorAuthentication'
+            ),
+        );
 
         $this->secondFactorSessionStorageService->setAuthenticationStatus(AuthenticationStatus::AUTHENTICATED);
 
diff --git a/Resources/Private/Fusion/Presentation/Components/SecondFactorList.fusion b/Resources/Private/Fusion/Presentation/Components/SecondFactorList.fusion
index 462f005..6c2e3b9 100644
--- a/Resources/Private/Fusion/Presentation/Components/SecondFactorList.fusion
+++ b/Resources/Private/Fusion/Presentation/Components/SecondFactorList.fusion
@@ -5,8 +5,8 @@ prototype(Sandstorm.NeosTwoFactorAuthentication:Component.SecondFactorList) < pr
         <table class="neos-table">
             <thead>
             <tr>
-                <th>Name</th>
-                <th>Type</th>
+                <th>{I18n.id('module.index.list.header.name').package('Sandstorm.NeosTwoFactorAuthentication').source('Backend').translate()}</th>
+                <th>{I18n.id('module.index.list.header.type').package('Sandstorm.NeosTwoFactorAuthentication').source('Backend').translate()}</th>
                 <th>&nbsp;</th>
             </tr>
             </thead>
@@ -44,7 +44,7 @@ prototype(Sandstorm.NeosTwoFactorAuthentication:Component.SecondFactorList.Entry
             <td>{props.factorAndPerson.secondFactor.typeAsName}</td>
             <td>
                 <button class="neos-button neos-button-danger" data-toggle="modal"
-                        href={'#user-' + props.iterator.index} title="todo" data-neos-toggle="tooltip">
+                        href={'#user-' + props.iterator.index} title={I18n.id('module.index.list.action.delete').package('Sandstorm.NeosTwoFactorAuthentication').source('Backend').translate()} data-neos-toggle="tooltip">
                     <i class="fas fa-trash-alt icon-white"></i>
                 </button>
 
diff --git a/Resources/Private/Translations/en/Backend.xlf b/Resources/Private/Translations/en/Backend.xlf
index ed77770..d0f5dc6 100644
--- a/Resources/Private/Translations/en/Backend.xlf
+++ b/Resources/Private/Translations/en/Backend.xlf
@@ -1,44 +1,67 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <xliff version="1.2" xmlns="urn:oasis:names:tc:xliff:document:1.2">
-	<file original="" product-name="Sandstorm.NeosTwoFactorAuthentication" source-language="en" datatype="plaintext">
-		<body>
-			<trans-unit id="module.label" xml:space="preserve">
-				<source>Two Factor Authentication</source>
-			</trans-unit>
-
-			<trans-unit id="module.description" xml:space="preserve">
-                <source>TODO: description</source>
-            </trans-unit>
+  <file original="" product-name="Sandstorm.NeosTwoFactorAuthentication" source-language="en" datatype="plaintext">
+    <body>
+      <trans-unit id="module.label" xml:space="preserve">
+        <source>Two-Factor Authentication</source>
+      </trans-unit>
+      <trans-unit id="module.description" xml:space="preserve">
+        <source>This module allows registering and managing a second factor for the backend login.</source>
+      </trans-unit>
 
-            <trans-unit id="module.index.title" xml:space="preserve">
-                <source>List of all registered second factors</source>
-            </trans-unit>
-            <trans-unit id="module.index.create" xml:space="preserve">
-                <source>Create Second Factor</source>
-            </trans-unit>
+      <trans-unit id="module.index.title" xml:space="preserve">
+        <source>List of all registered second factors</source>
+      </trans-unit>
+      <trans-unit id="module.index.list.header.name" xml:space="preserve">
+        <source>Name</source>
+      </trans-unit>
+      <trans-unit id="module.index.list.header.type" xml:space="preserve">
+        <source>Type</source>
+      </trans-unit>
+      <trans-unit id="module.index.list.action.delete" xml:space="preserve">
+        <source>Delete second factor</source>
+      </trans-unit>
+      <trans-unit id="module.index.create" xml:space="preserve">
+        <source>Create second factor</source>
+      </trans-unit>
 
-            <trans-unit id="module.index.delete.header" xml:space="preserve">
-                <source>Do you really want to delete the second factor?</source>
-            </trans-unit>
-            <trans-unit id="module.index.delete.text" xml:space="preserve">
-                <source>Deleting a second factor can not be undone!</source>
-            </trans-unit>
-            <trans-unit id="module.index.delete.cancel" xml:space="preserve">
-                <source>Cancel</source>
-            </trans-unit>
-            <trans-unit id="module.index.delete.confirm" xml:space="preserve">
-                <source>Delete Second Factor</source>
-            </trans-unit>
+      <trans-unit id="module.index.delete.header" xml:space="preserve">
+        <source>Do you really want to delete the second factor?</source>
+      </trans-unit>
+      <trans-unit id="module.index.delete.text" xml:space="preserve">
+        <source>Deleting a second factor can not be undone.</source>
+      </trans-unit>
+      <trans-unit id="module.index.delete.cancel" xml:space="preserve">
+        <source>Cancel</source>
+      </trans-unit>
+      <trans-unit id="module.index.delete.confirm" xml:space="preserve">
+        <source>Delete second factor</source>
+      </trans-unit>
+      <trans-unit id="module.index.delete.flashMessage.errorHeader" xml:space="preserve">
+        <source>Error</source>
+      </trans-unit>
+      <trans-unit id="module.index.delete.flashMessage.secondFactorDeleted" xml:space="preserve">
+        <source>The second factor was deleted.</source>
+      </trans-unit>
+      <trans-unit id="module.index.delete.flashMessage.cannotRemoveLastSecondFactor" xml:space="preserve">
+        <source>Cannot remove the last second factor because the two-factor authentication is enforced.</source>
+      </trans-unit>
 
-            <trans-unit id="module.new.title" xml:space="preserve">
-                <source>Register new second factor</source>
-            </trans-unit>
-            <trans-unit id="module.new.description" xml:space="preserve">
-                <source>To register a new second factor, scan the QR code with any TOTP app and enter the code</source>
-            </trans-unit>
-            <trans-unit id="module.new.submit-otp" xml:space="preserve">
-                <source>Register new OTP</source>
-            </trans-unit>
-		</body>
-	</file>
+      <trans-unit id="module.new.title" xml:space="preserve">
+        <source>Register new second factor</source>
+      </trans-unit>
+      <trans-unit id="module.new.description" xml:space="preserve">
+        <source>To register a new second factor, scan the QR code with any TOTP app (e.g. Google Authenticator, Microsoft Authenticator, Authy) and enter the code.</source>
+      </trans-unit>
+      <trans-unit id="module.new.submit-otp" xml:space="preserve">
+        <source>Register new OTP</source>
+      </trans-unit>
+      <trans-unit id="module.new.flashMessage.submittedOtpIncorrect" xml:space="preserve">
+				<source>Submitted OTP was incorrect.</source>
+      </trans-unit>
+      <trans-unit id="module.new.flashMessage.successfullyRegisteredOtp" xml:space="preserve">
+				<source>OTP was registered successfully.</source>
+			</trans-unit>
+    </body>
+  </file>
 </xliff>
diff --git a/Resources/Private/Translations/en/Main.xlf b/Resources/Private/Translations/en/Main.xlf
index b80ace8..1fbad6f 100644
--- a/Resources/Private/Translations/en/Main.xlf
+++ b/Resources/Private/Translations/en/Main.xlf
@@ -1,10 +1,22 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <xliff version="1.2" xmlns="urn:oasis:names:tc:xliff:document:1.2">
-    <file original="" product-name="Sandstorm.NeosTwoFactorAuthentication" source-language="en" datatype="plaintext">
-        <body>
-            <trans-unit id="otp-placeholder" xml:space="preserve">
-				<source>OTP from App</source>
+  <file original="" product-name="Sandstorm.NeosTwoFactorAuthentication" source-language="en" datatype="plaintext">
+    <body>
+      <trans-unit id="otp-placeholder" xml:space="preserve">
+        <source>OTP from App</source>
+      </trans-unit>
+      <trans-unit id="login.flashMessage.errorHeader" xml:space="preserve">
+				<source>Error</source>
 			</trans-unit>
-        </body>
-    </file>
+      <trans-unit id="login.flashMessage.invalidOtp" xml:space="preserve">
+				<source>The provided OTP is invalid.</source>
+			</trans-unit>
+      <trans-unit id="login.flashMessage.submittedOtpIncorrect" xml:space="preserve">
+				<source>Submitted OTP was incorrect.</source>
+			</trans-unit>
+      <trans-unit id="login.flashMessage.successfullyRegisteredOtp" xml:space="preserve">
+				<source>OTP was registered successfully.</source>
+			</trans-unit>
+    </body>
+  </file>
 </xliff>

From a1d29b023c7c682d5ff6b1bcaeefb42177017e63 Mon Sep 17 00:00:00 2001
From: Lorenz Ulrich <lorenz.ulrich@visol.ch>
Date: Fri, 12 Jan 2024 18:33:18 +0100
Subject: [PATCH 5/6] TASK: Add German translation

---
 Resources/Private/Translations/de/Backend.xlf | 86 +++++++++++++++++++
 Resources/Private/Translations/de/Main.xlf    | 27 ++++++
 2 files changed, 113 insertions(+)
 create mode 100644 Resources/Private/Translations/de/Backend.xlf
 create mode 100644 Resources/Private/Translations/de/Main.xlf

diff --git a/Resources/Private/Translations/de/Backend.xlf b/Resources/Private/Translations/de/Backend.xlf
new file mode 100644
index 0000000..95322de
--- /dev/null
+++ b/Resources/Private/Translations/de/Backend.xlf
@@ -0,0 +1,86 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xliff version="1.2" xmlns="urn:oasis:names:tc:xliff:document:1.2">
+  <file original="" product-name="Sandstorm.NeosTwoFactorAuthentication" source-language="en" datatype="plaintext" target-language="de">
+    <body>
+      <trans-unit id="module.label" xml:space="preserve">
+        <source>Two-Factor Authentication</source>
+        <target>Zwei-Faktor-Authentifizierung</target>
+      </trans-unit>
+      <trans-unit id="module.description" xml:space="preserve">
+        <source>This module allows registering and managing a second factor for the backend login.</source>
+        <target>Dieses Modul erlaubt die Einrichtung und Verwaltung eines zweiten Faktors für das Backend-Login.</target>
+      </trans-unit>
+
+      <trans-unit id="module.index.title" xml:space="preserve">
+        <source>List of all registered second factors</source>
+        <target>Liste aller registrierten zweiten Faktoren</target>
+      </trans-unit>
+      <trans-unit id="module.index.list.header.name" xml:space="preserve">
+        <source>Name</source>
+        <target>Name</target>
+      </trans-unit>
+      <trans-unit id="module.index.list.header.type" xml:space="preserve">
+        <source>Type</source>
+        <target>Typ</target>
+      </trans-unit>
+      <trans-unit id="module.index.list.action.delete" xml:space="preserve">
+        <source>Delete second factor</source>
+        <target>Zweiten Faktor löschen</target>
+      </trans-unit>
+      <trans-unit id="module.index.create" xml:space="preserve">
+        <source>Create second factor</source>
+        <target>Zweiten Faktor erstellen</target>
+      </trans-unit>
+
+      <trans-unit id="module.index.delete.header" xml:space="preserve">
+        <source>Do you really want to delete the second factor?</source>
+        <target>Wollen Sie den zweiten Faktor wirklich löschen?</target>
+      </trans-unit>
+      <trans-unit id="module.index.delete.text" xml:space="preserve">
+        <source>Deleting a second factor can not be undone.</source>
+        <target>Das Löschen eines zweiten Faktors kann nicht rückgängig gemacht werden.</target>
+      </trans-unit>
+      <trans-unit id="module.index.delete.cancel" xml:space="preserve">
+        <source>Cancel</source>
+        <target>Abbrechen</target>
+      </trans-unit>
+      <trans-unit id="module.index.delete.confirm" xml:space="preserve">
+        <source>Delete second factor</source>
+        <target>Zweiten Faktor löschen</target>
+      </trans-unit>
+      <trans-unit id="module.index.delete.flashMessage.errorHeader" xml:space="preserve">
+        <source>Error</source>
+        <target>Fehler</target>
+      </trans-unit>
+      <trans-unit id="module.index.delete.flashMessage.secondFactorDeleted" xml:space="preserve">
+        <source>The second factor was deleted.</source>
+        <target>Der zweite Faktor wurde gelöscht.</target>
+      </trans-unit>
+      <trans-unit id="module.index.delete.flashMessage.cannotRemoveLastSecondFactor" xml:space="preserve">
+        <source>Cannot remove the last second factor because the two-factor authentication is enforced.</source>
+        <target>Der letzte zweite Faktor kann nicht gelöscht werden, da die Zwei-Faktor-Authentifizierung erzwungen wird.</target>
+      </trans-unit>
+
+      <trans-unit id="module.new.title" xml:space="preserve">
+        <source>Register new second factor</source>
+        <target>Neuen zweiten Faktor registrieren</target>
+      </trans-unit>
+      <trans-unit id="module.new.description" xml:space="preserve">
+        <source>To register a new second factor, scan the QR code with any TOTP app (e.g. Google Authenticator, Microsoft Authenticator, Authy) and enter the code.</source>
+        <target>Scannen Sie den QR-Code in Ihrer TOTP-App (z.B. Google Authenticator, Microsoft Authenticator, Authy) und geben Sie den Code ein, um einen neuen zweiten Faktor zu registrieren.</target>
+      </trans-unit>
+      <trans-unit id="module.new.submit-otp" xml:space="preserve">
+        <source>Register new OTP</source>
+        <target>Neues OTP registrieren</target>
+      </trans-unit>
+      <trans-unit id="module.new.flashMessage.submittedOtpIncorrect" xml:space="preserve">
+				<source>Submitted OTP was incorrect.</source>
+        <target>Das eingegebene OTP ist nicht korrekt.</target>
+      </trans-unit>
+      <trans-unit id="module.new.flashMessage.successfullyRegisteredOtp" xml:space="preserve">
+				<source>OTP was registered successfully.</source>
+        <target>Das OTP wurde erfolgreich registriert.</target>
+			</trans-unit>
+    </body>
+  </file>
+</xliff>
diff --git a/Resources/Private/Translations/de/Main.xlf b/Resources/Private/Translations/de/Main.xlf
new file mode 100644
index 0000000..56ac9f6
--- /dev/null
+++ b/Resources/Private/Translations/de/Main.xlf
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xliff version="1.2" xmlns="urn:oasis:names:tc:xliff:document:1.2">
+  <file original="" product-name="Sandstorm.NeosTwoFactorAuthentication" source-language="en" datatype="plaintext" target-language="de">
+    <body>
+      <trans-unit id="otp-placeholder" xml:space="preserve">
+				<source>OTP from App</source>
+				<target>OTP aus App</target>
+			</trans-unit>
+      <trans-unit id="login.flashMessage.errorHeader" xml:space="preserve">
+				<source>Error</source>
+				<target>Fehler</target>
+			</trans-unit>
+      <trans-unit id="login.flashMessage.invalidOtp" xml:space="preserve">
+				<source>The provided OTP is invalid.</source>
+				<target>Das eingegebene OTP ist ungültig.</target>
+			</trans-unit>
+      <trans-unit id="login.flashMessage.submittedOtpIncorrect" xml:space="preserve">
+				<source>Submitted OTP was incorrect.</source>
+				<target>Das eingegebene OTP ist nicht korrekt.</target>
+			</trans-unit>
+      <trans-unit id="login.flashMessage.successfullyRegisteredOtp" xml:space="preserve">
+				<source>OTP was registered successfully.</source>
+				<target>Das OTP wurde erfolgreich registriert.</target>
+			</trans-unit>
+    </body>
+  </file>
+</xliff>

From 6371c76dc573edf7df0da847894d9136d4797650 Mon Sep 17 00:00:00 2001
From: Lorenz Ulrich <lorenz.ulrich@visol.ch>
Date: Fri, 12 Jan 2024 18:33:26 +0100
Subject: [PATCH 6/6] FIX: Style "Create OTP" button during login process

---
 .../Fusion/Presentation/Pages/SetupSecondFactorPage.fusion    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Resources/Private/Fusion/Presentation/Pages/SetupSecondFactorPage.fusion b/Resources/Private/Fusion/Presentation/Pages/SetupSecondFactorPage.fusion
index 009043d..2e3986e 100644
--- a/Resources/Private/Fusion/Presentation/Pages/SetupSecondFactorPage.fusion
+++ b/Resources/Private/Fusion/Presentation/Pages/SetupSecondFactorPage.fusion
@@ -94,8 +94,8 @@ prototype(Sandstorm.NeosTwoFactorAuthentication:Page.SetupSecondFactorPage) < pr
                                             />
                                         </div>
 
-                                        <div class="neos-control-group">
-                                            <Neos.Fusion.Form:Button>
+                                        <div class="neos-control-group neos-actions">
+                                            <Neos.Fusion.Form:Button attributes.class="neos-span5 neos-pull-right neos-button neos-login-btn">
                                                 {I18n.id('module.new.submit-otp').package('Sandstorm.NeosTwoFactorAuthentication').source('Backend').translate()}
                                             </Neos.Fusion.Form:Button>
                                         </div>