mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-09 03:36:48 +00:00
85b5c769e9
The user page a superuser opens from the user list has an API Tokens
tab: the user's tokens with their name, first characters, creation,
expiry and last use, and a delete button for one that may have leaked.
The token itself is never shown; only its digest is kept.
The delete reuses the owner's delete view with the user's id; only a
superuser may name another user. The confirmation and the log row say
whose token it was ("API token backup of alice"); the owner's own
confirmation now reads "Delete "API token backup"?" too. The profile
and the user page share one token table, and one script that opens a
tab named in the address (#apitokens).
|
||
|---|---|---|
| .. | ||
| __init__.py | ||
| test_admin_email_otp.py | ||
| test_admin_password.py | ||
| test_api_tokens.py | ||
| test_audit_rows.py | ||
| test_change_password_permission.py | ||
| test_checks.py | ||
| test_email_otp.py | ||
| test_first_login_password.py | ||
| test_login_lockout.py | ||
| test_otp_login.py | ||
| test_security_fixes.py | ||
| test_utils.py | ||
| test_views.py | ||