catborise 2e5ef34473 fix(accounts): an email address belongs to one user, so "Lost OTP?" reaches it ... "Lost OTP?" mails the QR code only when exactly one active user has the address. Any user could enter another user's address in their profile and silently switch the recovery off for both. The profile and the admin user forms now refuse an address another user has, ignoring case; an empty address stays allowed for everyone.		2026-10-26 11:19:42 +03:00
..
migrations	fix(admin): the Users pages keep an administrator in and say what their fields mean	2026-10-25 22:38:40 +03:00
templates	fix(admin): the Users pages keep an administrator in and say what their fields mean	2026-10-25 22:38:40 +03:00
templatetags	lint with black python. convert f style strings to old one. some small fixes	2020-11-05 12:34:31 +03:00
tests	fix(accounts): an email address belongs to one user, so "Lost OTP?" reaches it	2026-10-26 11:19:42 +03:00
__init__.py	Fixe migrations for new deployments	2020-05-28 18:19:25 +06:00
apps.py	fix(accounts): migrate no longer overrides the change-password permission	2026-10-04 20:26:53 +03:00
auth.py	fix(admin): a forced password change cannot trap a user or be skipped with a token	2026-10-26 10:12:53 +03:00
checks.py	fix(accounts): migrate no longer overrides the change-password permission	2026-10-04 20:26:53 +03:00
forms.py	fix(accounts): an email address belongs to one user, so "Lost OTP?" reaches it	2026-10-26 11:19:42 +03:00
lockout.py	feat(accounts): failed logins lock a user for the address they come from	2026-10-06 11:05:03 +03:00
middleware.py	feat(admin): a password an administrator sets can be one the user must change	2026-10-25 22:38:40 +03:00
models.py	fix(admin): the Users pages keep an administrator in and say what their fields mean	2026-10-25 22:38:40 +03:00
otp.py	fix(accounts): a username longer than the field is refused by the login form	2026-10-23 16:06:10 +03:00
urls.py	feat(accounts): a superuser sees and deletes a user's API tokens	2026-10-25 14:13:47 +03:00
utils.py	build(deps): the OTP e-mail draws its QR code with segno	2026-10-12 07:24:56 +03:00
views.py	fix(admin): the Users pages keep an administrator in and say what their fields mean	2026-10-25 22:38:40 +03:00