Adrià Casajús
|
60a070731e
|
Send newrelic events on login and register
|
2022-04-11 10:18:22 +02:00 |
|
Adrià Casajús
|
e91fd26964
|
Sanitized missing places
|
2022-03-29 18:03:18 +02:00 |
|
Carlos Quintana
|
2f9489fe39
|
Only allow relative redirects
|
2022-02-15 15:16:31 +01:00 |
|
george
|
50122da0fe
|
Implement API notifications and use a function in email_utils
|
2022-01-20 17:42:11 +00:00 |
|
george
|
42407a0543
|
Send the email after the local error.
|
2022-01-20 16:44:15 +00:00 |
|
george
|
f7f91afc1e
|
Send a notification email for invalid recovery codes.
|
2022-01-20 16:41:42 +00:00 |
|
george
|
6d736aa915
|
Implement rate limiting with send_email_with_rate_control.
|
2022-01-20 15:05:18 +00:00 |
|
george
|
0eb2984b9c
|
Add invalid TOTP login email notifications.
|
2022-01-20 14:18:47 +00:00 |
|
Son
|
733a9c42b0
|
delete activation code before sending email to avoid any delay
|
2021-12-29 10:26:42 +01:00 |
|
Son
|
abc074ea9b
|
make sure password can't be longer than 100 chars
|
2021-11-16 19:41:05 +01:00 |
|
Son
|
0fbd351bed
|
handle the referral url that has ?slref=code part
|
2021-10-25 15:02:02 +02:00 |
|
Son
|
372466ab06
|
do not use flask-sqlalchemy
- add __tablename__ for all models
- use sa and orm instead of db
- rollback all changes in tests
- remove session in @app.teardown_appcontext
|
2021-10-12 14:36:47 +02:00 |
|
Son
|
5d7e10f776
|
make sure when user changes password, log user out on other browsers
|
2021-10-11 11:30:41 +02:00 |
|
Son Nguyen Kim
|
5ac78f2694
|
reformat
|
2021-09-08 11:29:55 +02:00 |
|
Son Nguyen Kim
|
cc650f9fae
|
remove unused import
|
2021-07-12 18:56:43 +02:00 |
|
Son Nguyen Kim
|
99599bb09f
|
make sure user needs to go through MFA when resetting password
|
2021-07-12 18:56:09 +02:00 |
|
Son NK
|
09d00df363
|
reformat imports
|
2021-06-27 17:50:36 +02:00 |
|
Son NK
|
f3b04b9d81
|
add more logging
|
2021-04-16 18:37:16 +02:00 |
|
Son NK
|
b476e207fa
|
take into account ?next param in login
|
2021-01-27 10:11:48 +01:00 |
|
Son NK
|
e9adb3270d
|
use sanitize_email instead of .lower().strip().replace(" ", "")
|
2021-01-11 12:29:40 +01:00 |
|
Son NK
|
ef7fae32b1
|
remove the "Hi {name}" from email template
|
2021-01-11 10:23:34 +01:00 |
|
Renaud Boyer
|
c09b6ef675
|
linting
|
2020-12-06 22:08:35 +01:00 |
|
Renaud Boyer
|
1c73f07d18
|
linting
|
2020-12-06 22:08:05 +01:00 |
|
Son NK
|
0a4fc76b61
|
optimize import
|
2020-10-15 16:45:28 +02:00 |
|
Son NK
|
90163220cf
|
rename email_domain_can_be_used_as_mailbox -> email_can_be_used_as_mailbox
|
2020-10-15 16:05:47 +02:00 |
|
Son NK
|
7e425c0338
|
disable login if user is disabled
|
2020-10-04 12:49:43 +02:00 |
|
Son NK
|
fdedc24358
|
black new version
|
2020-08-27 10:20:48 +02:00 |
|
Son NK
|
b7cbaa6e84
|
delete the expired ChangeEmail object
|
2020-08-13 10:59:39 +02:00 |
|
Son NK
|
b395c2ebd0
|
use warning log for FIDO error
|
2020-08-12 12:48:51 +02:00 |
|
Son NK
|
efe1ab641f
|
add hCaptcha check
|
2020-07-23 12:43:55 +02:00 |
|
Son NK
|
6437ee46e0
|
use LOG.exception instead of LOG.error to provide stacktrace
|
2020-07-17 12:59:07 +02:00 |
|
Son NK
|
c41bffbbae
|
refactor: use SESSION_COOKIE_NAME instead of hardcoding "slapp"
|
2020-06-28 21:17:18 +02:00 |
|
Son NK
|
4ee38823b8
|
make sure to strip and lower email
|
2020-06-11 23:35:24 +02:00 |
|
Son NK
|
fa06c5cd4b
|
make sure user cannot reuse the old password
|
2020-05-30 19:50:33 +02:00 |
|
Sibren Vasse
|
31a1f94a5f
|
Implement rate limiting
|
2020-05-25 11:39:33 +02:00 |
|
Sibren Vasse
|
3c7e03f83d
|
Add remember option to FIDO mfa path
|
2020-05-24 19:23:16 +02:00 |
|
Sibren Vasse
|
097ac771b0
|
Prevent OTP replay attacks by invalidating last token
|
2020-05-24 19:23:16 +02:00 |
|
Sibren Vasse
|
35bb1645a3
|
Allow user to disable mfa for browser for 30 days
|
2020-05-24 19:23:16 +02:00 |
|
Sibren Vasse
|
8c946d7026
|
Remove token when submitted value is incorrect
|
2020-05-24 19:23:16 +02:00 |
|
Son Nguyen Kim
|
eb60028b1f
|
Merge pull request #199 from developStorm/webauthn-multiple-keys
Support Multiple Keys for WebAuthn
|
2020-05-24 18:56:42 +02:00 |
|
Son NK
|
93d972df09
|
make sure to use lowercase for alias email
|
2020-05-20 18:12:14 +02:00 |
|
devStorm
|
7bd97e13b0
|
fido_model -> fidos
|
2020-05-18 13:55:38 -07:00 |
|
devStorm
|
ea914e0378
|
Rename FIDO->Fido
|
2020-05-18 13:54:05 -07:00 |
|
devStorm
|
35f0c094fe
|
black
|
2020-05-18 01:04:45 -07:00 |
|
devStorm
|
419aa95f1f
|
more verify
|
2020-05-18 01:02:58 -07:00 |
|
devStorm
|
ec91d280bb
|
Verify
|
2020-05-18 00:08:06 -07:00 |
|
Son NK
|
87d52216cb
|
reformat
|
2020-05-17 10:35:11 +02:00 |
|
Son NK
|
20e66edbaa
|
fix redirection to next page
|
2020-05-17 10:28:00 +02:00 |
|
Son NK
|
2e208ed505
|
display recovery code options on mfa and fido page
|
2020-05-17 10:27:20 +02:00 |
|
Son NK
|
da4e0bf384
|
create /auth/recovery page
|
2020-05-17 10:17:52 +02:00 |
|