catborise 45828928ab fix(accounts): the admin's Email OTP sent twice at once makes one device ... get_user_totp_device looked for the user's TOTP device and made one if there was none; two requests at once could both make one, and both devices' codes then logged in. It now does so under a lock on the user's row.		2026-11-05 18:58:13 +03:00
..
migrations	fix(admin): the Users pages keep an administrator in and say what their fields mean	2026-10-25 22:38:40 +03:00
templates	fix(accounts): an OTP mail links to the QR code instead of holding its secret	2026-11-05 18:17:00 +03:00
templatetags	lint with black python. convert f style strings to old one. some small fixes	2020-11-05 12:34:31 +03:00
tests	fix(accounts): the admin's Email OTP sent twice at once makes one device	2026-11-05 18:58:13 +03:00
__init__.py	Fixe migrations for new deployments	2020-05-28 18:19:25 +06:00
apps.py	fix(accounts): migrate no longer overrides the change-password permission	2026-10-04 20:26:53 +03:00
auth.py	fix(admin): a forced password change cannot trap a user or be skipped with a token	2026-10-26 10:12:53 +03:00
checks.py	fix(accounts): migrate no longer overrides the change-password permission	2026-10-04 20:26:53 +03:00
forms.py	feat(templates): the shared form and delete pages in a centred column	2026-10-31 18:10:05 +03:00
lockout.py	feat(accounts): failed logins lock a user for the address they come from	2026-10-06 11:05:03 +03:00
middleware.py	feat(admin): a password an administrator sets can be one the user must change	2026-10-25 22:38:40 +03:00
models.py	fix(admin): the Users pages keep an administrator in and say what their fields mean	2026-10-25 22:38:40 +03:00
otp.py	fix(accounts): a username longer than the field is refused by the login form	2026-10-23 16:06:10 +03:00
urls.py	fix(accounts): an OTP mail links to the QR code instead of holding its secret	2026-11-05 18:17:00 +03:00
utils.py	fix(accounts): the admin's Email OTP sent twice at once makes one device	2026-11-05 18:58:13 +03:00
views.py	fix(accounts): an API token form sent twice makes one token	2026-11-05 18:58:13 +03:00