j3d1/webvirtcloud
1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-09 11:46:49 +00:00
Code Issues Projects Releases Wiki Activity
webvirtcloud/accounts
History
catborise 0b5eb990ed fix(admin): a forced password change cannot trap a user or be skipped with a token 
- The administrator's password form took "password-based
  authentication: Disabled" with "must change it at the next login":
  the change form asks for the old password, which the user then never
  had, so they could not get past it. That combination is refused, and
  an administrator cannot disable their own password.
- A user who must change the password could still use the API with
  their tokens. A token is now refused until they change it, as the
  pages are.
2026-10-26 10:12:53 +03:00
..
migrations fix(admin): the Users pages keep an administrator in and say what their fields mean 2026-10-25 22:38:40 +03:00
templates fix(admin): the Users pages keep an administrator in and say what their fields mean 2026-10-25 22:38:40 +03:00
templatetags lint with black python. convert f style strings to old one. some small fixes 2020-11-05 12:34:31 +03:00
tests fix(admin): a forced password change cannot trap a user or be skipped with a token 2026-10-26 10:12:53 +03:00
__init__.py Fixe migrations for new deployments 2020-05-28 18:19:25 +06:00
apps.py fix(accounts): migrate no longer overrides the change-password permission 2026-10-04 20:26:53 +03:00
auth.py fix(admin): a forced password change cannot trap a user or be skipped with a token 2026-10-26 10:12:53 +03:00
checks.py fix(accounts): migrate no longer overrides the change-password permission 2026-10-04 20:26:53 +03:00
forms.py feat(accounts): API tokens for scripts and tools 2026-10-24 23:14:27 +03:00
lockout.py feat(accounts): failed logins lock a user for the address they come from 2026-10-06 11:05:03 +03:00
middleware.py feat(admin): a password an administrator sets can be one the user must change 2026-10-25 22:38:40 +03:00
models.py fix(admin): the Users pages keep an administrator in and say what their fields mean 2026-10-25 22:38:40 +03:00
otp.py fix(accounts): a username longer than the field is refused by the login form 2026-10-23 16:06:10 +03:00
urls.py feat(accounts): a superuser sees and deletes a user's API tokens 2026-10-25 14:13:47 +03:00
utils.py build(deps): the OTP e-mail draws its QR code with segno 2026-10-12 07:24:56 +03:00
views.py fix(admin): the Users pages keep an administrator in and say what their fields mean 2026-10-25 22:38:40 +03:00