catborise
cf1cde376b
fix: require POST for user block/unblock and OTP email, flag console cookie
...
- user_block, user_unblock and admin_email_otp changed state on GET, so an
<img> tag could lock a user out or trigger OTP emails through an
admin's session. They now require POST; the buttons are CSRF forms.
- The console token cookie is set with httponly, SameSite=Lax and, on
HTTPS, secure. Only novncd reads it; the page gets the token directly.
2026-10-02 22:44:00 +03:00
Amélie Krejčí
1b2b3a3bce
Get UserAttributes object using get_or_create
...
This is done to automatically create the UserAttributes object in case LDAP User Backend didn't create it.
2023-09-23 09:52:48 +02:00
catborise
a1eab70e2d
reorg imports and black format
2022-11-02 16:05:41 +03:00
catborise
217e106c8b
format python code with black
2022-11-02 08:54:35 +03:00
catborise
508e3609be
lint with black python. convert f style strings to old one. some small fixes
2020-11-05 12:34:31 +03:00
Real-Gecko
5a19f0c949
OTP improvements
2020-10-19 14:26:08 +06:00
Real-Gecko
1b3fd9d05e
replaced ugettext_lazy with gettext_lazy
2020-10-14 18:27:57 +06:00
catborise
922a8e62d1
fix some linter warnings
2020-09-25 15:57:17 +03:00
catborise
de63d9746d
add change other user password ability to superusers
2020-07-23 13:16:39 +03:00
Real-Gecko
1a3cc36ada
Moved admin/common/form.html to project templates
2020-06-16 18:04:37 +06:00
Real-Gecko
2951d0b035
Cleaned up UserAttributes model
2020-06-16 11:26:58 +06:00
Real-Gecko
68f7376d15
Moved confirm_delete.html to project templates
2020-06-15 16:30:27 +06:00
catborise
e46bb99b3b
fix typos and rearrange imports & add new lines EOF
2020-06-04 15:22:55 +03:00
catborise
e21f423bcf
Convert LOGS_PER_PAGE from static settings to appsettings
2020-06-04 14:35:34 +03:00
Real-Gecko
5ab22ba947
Added accounts test(moved from admin)
...
Actuall added admin tests
2020-05-29 15:47:13 +06:00
Real-Gecko
27f62dff6c
Added admin application
...
- Manage users
- Manage groups
- Manage logs
2020-05-27 18:24:06 +06:00