mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 11:16:47 +00:00
"Lost OTP?" mails the QR code only when exactly one active user has the address. Any user could enter another user's address in their profile and silently switch the recovery off for both. The profile and the admin user forms now refuse an address another user has, ignoring case; an empty address stays allowed for everyone. |
||
|---|---|---|
| .. | ||
| migrations | ||
| templates/admin | ||
| tests | ||
| __init__.py | ||
| apps.py | ||
| decorators.py | ||
| forms.py | ||
| models.py | ||
| permissions.py | ||
| urls.py | ||
| views.py | ||