167 Commits

Author	SHA1	Message	Date
george	50122da0fe	Implement API notifications and use a function in email_utils	2022-01-20 17:42:11 +00:00
george	42407a0543	Send the email after the local error.	2022-01-20 16:44:15 +00:00
george	f7f91afc1e	Send a notification email for invalid recovery codes.	2022-01-20 16:41:42 +00:00
george	6d736aa915	Implement rate limiting with send_email_with_rate_control.	2022-01-20 15:05:18 +00:00
george	0eb2984b9c	Add invalid TOTP login email notifications.	2022-01-20 14:18:47 +00:00
Son	733a9c42b0	delete activation code before sending email to avoid any delay	2021-12-29 10:26:42 +01:00
Son	abc074ea9b	make sure password can't be longer than 100 chars	2021-11-16 19:41:05 +01:00
Son	516898af59	move all template files to templates/	2021-11-04 15:05:22 +01:00
Son	0fbd351bed	handle the referral url that has ?slref=code part	2021-10-25 15:02:02 +02:00
Son	9fb6e45077	fix the help text too close to the input	2021-10-19 17:38:29 +02:00
Son	372466ab06	do not use flask-sqlalchemy ... - add __tablename__ for all models - use sa and orm instead of db - rollback all changes in tests - remove session in @app.teardown_appcontext	2021-10-12 14:36:47 +02:00
Son	5d7e10f776	make sure when user changes password, log user out on other browsers	2021-10-11 11:30:41 +02:00
Son Nguyen Kim	d7d301b9c3	add missing h1	2021-09-22 16:03:58 +02:00
Son Nguyen Kim	5ac78f2694	reformat	2021-09-08 11:29:55 +02:00
Son Nguyen Kim	cc650f9fae	remove unused import	2021-07-12 18:56:43 +02:00
Son Nguyen Kim	99599bb09f	make sure user needs to go through MFA when resetting password	2021-07-12 18:56:09 +02:00
Son NK	09d00df363	reformat imports	2021-06-27 17:50:36 +02:00
Son NK	f3b04b9d81	add more logging	2021-04-16 18:37:16 +02:00
Son NK	9e4ff01b17	improve login, register UI	2021-04-06 12:06:11 +02:00
Son NK	1b41911598	remove social login from the login page	2021-03-29 16:06:58 +02:00
Son NK	1187b6dc99	update mailbox wording	2021-03-18 10:59:45 +01:00
Son NK	0848405d0c	add mention not allowing forward email address	2021-03-17 10:27:46 +01:00
Son NK	b476e207fa	take into account ?next param in login	2021-01-27 10:11:48 +01:00
Son NK	e9adb3270d	use sanitize_email instead of .lower().strip().replace(" ", "")	2021-01-11 12:29:40 +01:00
Son NK	ef7fae32b1	remove the "Hi {name}" from email template	2021-01-11 10:23:34 +01:00
Renaud Boyer	c09b6ef675	linting	2020-12-06 22:08:35 +01:00
Renaud Boyer	1c73f07d18	linting	2020-12-06 22:08:05 +01:00
Son NK	0a4fc76b61	optimize import	2020-10-15 16:45:28 +02:00
Son NK	90163220cf	rename email_domain_can_be_used_as_mailbox -> email_can_be_used_as_mailbox	2020-10-15 16:05:47 +02:00
Son NK	7e425c0338	disable login if user is disabled	2020-10-04 12:49:43 +02:00
Son NK	fdedc24358	black new version	2020-08-27 10:20:48 +02:00
Son Nguyen Kim	637bc569eb	Merge pull request #260 from FabioWidmer/improvements-1 ... Improvements for Self Hosting & More	2020-08-24 20:16:59 +02:00
Fabio Widmer	6a45010740	Remove secret variables from Jinja	2020-08-22 18:38:44 +02:00
Fabio Widmer	28dbafe1f7	Hide deprecated social login if not used	2020-08-16 12:57:12 +02:00
Son NK	b7cbaa6e84	delete the expired ChangeEmail object	2020-08-13 10:59:39 +02:00
Son NK	b395c2ebd0	use warning log for FIDO error	2020-08-12 12:48:51 +02:00
Son NK	efe1ab641f	add hCaptcha check	2020-07-23 12:43:55 +02:00
Son NK	6437ee46e0	use LOG.exception instead of LOG.error to provide stacktrace	2020-07-17 12:59:07 +02:00
Son NK	c41bffbbae	refactor: use SESSION_COOKIE_NAME instead of hardcoding "slapp"	2020-06-28 21:17:18 +02:00
Son NK	4ee38823b8	make sure to strip and lower email	2020-06-11 23:35:24 +02:00
Son NK	fa06c5cd4b	make sure user cannot reuse the old password	2020-05-30 19:50:33 +02:00
George	a87f7e4be9	Change words	2020-05-27 21:53:48 +01:00
George	d9e29cc989	Reword 2FA page.	2020-05-27 19:49:13 +01:00
Sibren Vasse	31a1f94a5f	Implement rate limiting	2020-05-25 11:39:33 +02:00
Sibren Vasse	3c7e03f83d	Add remember option to FIDO mfa path	2020-05-24 19:23:16 +02:00
Sibren Vasse	097ac771b0	Prevent OTP replay attacks by invalidating last token	2020-05-24 19:23:16 +02:00
Sibren Vasse	35bb1645a3	Allow user to disable mfa for browser for 30 days	2020-05-24 19:23:16 +02:00
Sibren Vasse	e15ab7f932	Add autofocus to login screen	2020-05-24 19:23:16 +02:00
Sibren Vasse	8c946d7026	Remove token when submitted value is incorrect	2020-05-24 19:23:16 +02:00
Son Nguyen Kim	eb60028b1f	Merge pull request #199 from developStorm/webauthn-multiple-keys ... Support Multiple Keys for WebAuthn	2020-05-24 18:56:42 +02:00