catborise 5b2542c6ed fix(settings): new passwords pass Django's password validators ... AUTH_PASSWORD_VALIDATORS was unset, so the user forms and the password change accepted any password, a one-letter one included. The template now sets Django's four standard validators: at least 8 characters, not a common password, not only digits, not like the user's name or e-mail. The tests that set weak passwords use ones the validators accept.		2026-11-06 11:01:43 +03:00
..
migrations	fix(admin): the Users pages keep an administrator in and say what their fields mean	2026-10-25 22:38:40 +03:00
templates	fix(accounts): an OTP mail links to the QR code instead of holding its secret	2026-11-05 18:17:00 +03:00
templatetags	lint with black python. convert f style strings to old one. some small fixes	2020-11-05 12:34:31 +03:00
tests	fix(settings): new passwords pass Django's password validators	2026-11-06 11:01:43 +03:00
__init__.py	chore: remove code nothing uses	2026-11-06 10:53:37 +03:00
apps.py	fix(accounts): migrate no longer overrides the change-password permission	2026-10-04 20:26:53 +03:00
auth.py	fix(admin): a forced password change cannot trap a user or be skipped with a token	2026-10-26 10:12:53 +03:00
checks.py	fix(accounts): migrate no longer overrides the change-password permission	2026-10-04 20:26:53 +03:00
forms.py	feat(templates): the shared form and delete pages in a centred column	2026-10-31 18:10:05 +03:00
lockout.py	feat(accounts): failed logins lock a user for the address they come from	2026-10-06 11:05:03 +03:00
middleware.py	feat(admin): a password an administrator sets can be one the user must change	2026-10-25 22:38:40 +03:00
models.py	fix(admin): the Users pages keep an administrator in and say what their fields mean	2026-10-25 22:38:40 +03:00
otp.py	fix(accounts): a username longer than the field is refused by the login form	2026-10-23 16:06:10 +03:00
urls.py	fix(accounts): an OTP mail links to the QR code instead of holding its secret	2026-11-05 18:17:00 +03:00
utils.py	fix(accounts): the admin's Email OTP sent twice at once makes one device	2026-11-05 18:58:13 +03:00
views.py	fix(accounts): an API token form sent twice makes one token	2026-11-05 18:58:13 +03:00