j3d1/webvirtcloud
1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-10 04:06:47 +00:00
Code Issues Projects Releases Wiki Activity
webvirtcloud/accounts
History
catborise c42f74b4ee fix(accounts): an OTP mail links to the QR code instead of holding its secret 
The Lost OTP? page, open without a login, and the admin's Email OTP QR
code mailed the QR code itself: the TOTP secret then stayed in the
mailbox and on every server the mail passed. The mail now carries a
signed link, good for an hour, to a page that shows the QR code (not
cached); the page shows nothing for an old or altered link or a user
without a device. tr and zh too.
2026-11-05 18:17:00 +03:00
..
migrations fix(admin): the Users pages keep an administrator in and say what their fields mean 2026-10-25 22:38:40 +03:00
templates fix(accounts): an OTP mail links to the QR code instead of holding its secret 2026-11-05 18:17:00 +03:00
templatetags lint with black python. convert f style strings to old one. some small fixes 2020-11-05 12:34:31 +03:00
tests fix(accounts): an OTP mail links to the QR code instead of holding its secret 2026-11-05 18:17:00 +03:00
__init__.py Fixe migrations for new deployments 2020-05-28 18:19:25 +06:00
apps.py fix(accounts): migrate no longer overrides the change-password permission 2026-10-04 20:26:53 +03:00
auth.py fix(admin): a forced password change cannot trap a user or be skipped with a token 2026-10-26 10:12:53 +03:00
checks.py fix(accounts): migrate no longer overrides the change-password permission 2026-10-04 20:26:53 +03:00
forms.py feat(templates): the shared form and delete pages in a centred column 2026-10-31 18:10:05 +03:00
lockout.py feat(accounts): failed logins lock a user for the address they come from 2026-10-06 11:05:03 +03:00
middleware.py feat(admin): a password an administrator sets can be one the user must change 2026-10-25 22:38:40 +03:00
models.py fix(admin): the Users pages keep an administrator in and say what their fields mean 2026-10-25 22:38:40 +03:00
otp.py fix(accounts): a username longer than the field is refused by the login form 2026-10-23 16:06:10 +03:00
urls.py fix(accounts): an OTP mail links to the QR code instead of holding its secret 2026-11-05 18:17:00 +03:00
utils.py fix(accounts): an OTP mail links to the QR code instead of holding its secret 2026-11-05 18:17:00 +03:00
views.py fix(accounts): an OTP mail links to the QR code instead of holding its secret 2026-11-05 18:17:00 +03:00