catborise c42f74b4ee fix(accounts): an OTP mail links to the QR code instead of holding its secret ... The Lost OTP? page, open without a login, and the admin's Email OTP QR code mailed the QR code itself: the TOTP secret then stayed in the mailbox and on every server the mail passed. The mail now carries a signed link, good for an hour, to a page that shows the QR code (not cached); the page shows nothing for an old or altered link or a user without a device. tr and zh too.		2026-11-05 18:17:00 +03:00
..
tests	fix(accounts): an OTP mail links to the QR code instead of holding its secret	2026-11-05 18:17:00 +03:00
__init__.py	Initial commit	2015-02-27 10:53:51 +02:00
asgi.py	fix references to django 3 migration	2021-06-15 14:29:20 +03:00
bootstrap_icons.py	chore(deps): the icons come from the committed cache, not django-bootstrap-icons	2026-11-05 12:37:51 +03:00
common_tags.py	fix: render the 404 page for logged-in users	2026-10-04 01:08:11 +03:00
gunicorn_worker.py	fix(webvirtcloud): a worker past its request timeout exits even if its log blocks	2026-11-03 07:11:03 +03:00
log_context.py	feat(logs): each log line names its request, user and client address	2026-11-05 14:47:37 +03:00
middleware.py	feat(logs): a refused page or API call leaves a Logs row	2026-11-05 14:47:37 +03:00
serializers.py	fix(api): a VM action answers with what the page would have shown after it	2026-11-05 16:28:29 +03:00
settings-dev.py	fix(static): collectstatic writes to staticfiles/, and its output is no longer committed	2026-10-07 16:31:56 +03:00
settings.py.template	feat(logs): a refused page or API call leaves a Logs row	2026-11-05 14:47:37 +03:00
test_runner.py	fix(tests): a killed test run no longer breaks the next one	2026-10-26 16:43:22 +03:00
urls-api.py	feat(operations): jobs API	2026-10-14 23:27:57 +03:00
urls.py	feat(webvirtcloud): pages run only the scripts the panel serves	2026-11-02 10:08:09 +03:00
wsgi.py	fix: stop ignoring SIGCHLD process-wide	2026-10-04 13:40:53 +03:00