catborise c42f74b4ee fix(accounts): an OTP mail links to the QR code instead of holding its secret ... The Lost OTP? page, open without a login, and the admin's Email OTP QR code mailed the QR code itself: the TOTP secret then stayed in the mailbox and on every server the mail passed. The mail now carries a signed link, good for an hour, to a page that shows the QR code (not cached); the page shows nothing for an old or altered link or a user without a device. tr and zh too.		2026-11-05 18:17:00 +03:00
..
__init__.py	test: each app keeps its tests in a tests package	2026-10-12 15:17:30 +03:00
test_account_page.py	feat(templates): the shared form and delete pages in a centred column	2026-10-31 18:10:05 +03:00
test_admin_email_otp.py	fix(accounts): mailing an OTP QR code waits at most 10 seconds for the SMTP server	2026-11-05 11:04:08 +03:00
test_admin_password.py	test: each app keeps its tests in a tests package	2026-10-12 15:17:30 +03:00
test_api_tokens.py	feat(admin): the admin lists as a people directory, the user form by what it allows	2026-10-31 18:10:05 +03:00
test_audit_rows.py	fix(accounts): mailing an OTP QR code waits at most 10 seconds for the SMTP server	2026-11-05 11:04:08 +03:00
test_change_password_permission.py	style(accounts): the password pages have the account forms' layout	2026-11-04 23:11:52 +03:00
test_checks.py	test: each app keeps its tests in a tests package	2026-10-12 15:17:30 +03:00
test_email_otp.py	test: each app keeps its tests in a tests package	2026-10-12 15:17:30 +03:00
test_first_login_password.py	test: each app keeps its tests in a tests package	2026-10-12 15:17:30 +03:00
test_ldap_timeouts.py	fix(accounts): an LDAP login waits a bounded time for the directory	2026-11-05 11:04:08 +03:00
test_login_lockout.py	chore(accounts): django-axes keeps no record of successful logins	2026-11-05 10:36:34 +03:00
test_otp_login.py	fix(accounts): SSH keys with spaced comments, one token per create, OTP errors	2026-10-26 16:14:37 +03:00
test_security_fixes.py	test: each app keeps its tests in a tests package	2026-10-12 15:17:30 +03:00
test_unique_email.py	fix(accounts): an email address belongs to one user, so "Lost OTP?" reaches it	2026-10-26 11:19:42 +03:00
test_utils.py	fix(accounts): an OTP mail links to the QR code instead of holding its secret	2026-11-05 18:17:00 +03:00
test_views.py	feat(accounts): the profile with details beside the user's keys and tokens	2026-10-31 18:10:05 +03:00