catborise c42f74b4ee fix(accounts): an OTP mail links to the QR code instead of holding its secret ... The Lost OTP? page, open without a login, and the admin's Email OTP QR code mailed the QR code itself: the TOTP secret then stayed in the mailbox and on every server the mail passed. The mail now carries a signed link, good for an hour, to a page that shows the QR code (not cached); the page shows nothing for an old or altered link or a user without a device. tr and zh too.		2026-11-05 18:17:00 +03:00
..
accounts	fix(accounts): an OTP mail links to the QR code instead of holding its secret	2026-11-05 18:17:00 +03:00
account.html	feat(accounts): the administrator's view of a user as an identity strip and cards	2026-10-31 18:10:05 +03:00
api_token_created.html	feat(accounts): API tokens for scripts and tools	2026-10-24 23:14:27 +03:00
api_token_list.html	feat(accounts): the administrator's view of a user as an identity strip and cards	2026-10-31 18:10:05 +03:00
login.html	refactor(templates): the shared page scripts load from static files	2026-11-02 08:47:58 +03:00
profile.html	feat(accounts): the administrator's view of a user as an identity strip and cards	2026-10-31 18:10:05 +03:00
ssh_key_list.html	feat(accounts): the administrator's view of a user as an identity strip and cards	2026-10-31 18:10:05 +03:00