mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
3210ef2eee
Django's login form gives the username its max_length after the field is built, so a longer username was not refused and reached authentication. django-axes then stored it in its 255-character column, which PostgreSQL refuses: a login with a 300-character username was a 500 (SQLite does not enforce the length). Both login forms, with and without OTP, now check the length, so such a username is a form error and never reaches authentication, the lockout or the Logs page. This also turns the PostgreSQL leg of CI green again: the S-16 test from #167 hit exactly this. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| test_admin_email_otp.py | ||
| test_admin_password.py | ||
| test_audit_rows.py | ||
| test_change_password_permission.py | ||
| test_checks.py | ||
| test_email_otp.py | ||
| test_first_login_password.py | ||
| test_login_lockout.py | ||
| test_otp_login.py | ||
| test_security_fixes.py | ||
| test_utils.py | ||
| test_views.py | ||