nicoo
586654e08e
app.pw_models: Refactor, use constant-time equality
2021-05-29 17:42:46 +02:00
nicoo
ecd74b801b
app.pw_models: Use unicode normalization
...
Per NIST [SP800-63B, §5.1.1.2] Memorized Secret Verifiers :
> the verifier SHOULD apply the Normalization Process for
> Stabilized Strings using either the NFKC or NFKD normalization
This is necessary for Unicode passwords to work reliably.
ASCII-only passwords aren't affected.
[SP800-63B, §5.1.1.2]: https://pages.nist.gov/800-63-3/sp800-63b.html#-5112-memorized-secret-verifiers
2021-05-27 22:16:07 +02:00
nicoo
52d4d2abdb
app.models: minor refactor (extract pw auth)
2021-05-26 18:18:47 +02:00
Son NK
8cfd5e01dc
add alerts on /alias/custom/new and /v3/alias/options and below
2021-05-25 19:36:45 +02:00
Son NK
99d26a01cb
UI tweak
2021-05-25 18:30:14 +02:00
Son NK
388a425cac
Only show pagination control if there are previous/next page
2021-05-25 18:27:06 +02:00
Son NK
b23e3d94fd
make sure AliasHibp has cascade ondelete
2021-05-25 18:14:44 +02:00
Son NK
fb97f384e4
small UI tweak
2021-05-25 17:59:40 +02:00
Son NK
2f96322977
make sure BOUNCE_PREFIX_FOR_REPLY_PHASE can't be used as directory name or for creating aliases on-the-fly
2021-05-25 17:59:40 +02:00
Son NK
a918cc3670
Add BOUNCE_PREFIX_FOR_REPLY_PHASE
2021-05-25 17:59:40 +02:00
Son NK
159843a923
Add log for sl_sendmail
2021-05-24 12:04:22 +02:00
Son NK
ade07f9449
return empty name when name can't be decoded
2021-05-22 16:47:44 +02:00
Sylvia van Os
1ee941647f
Add direct link to HIBP pwned info
2021-05-21 12:08:00 +02:00
Son NK
d4e930c930
Remove nullsfirst as not compatible with sqlite. Add more logging
2021-05-19 12:46:55 +02:00
Son Nguyen Kim
b3f8fd6789
Merge pull request #472 from TheLastProject/feature/hibp
...
Add HIBP checks
2021-05-19 12:37:04 +02:00
Sylvia van Os
a08b0c05cc
Don't override id
2021-05-17 21:29:29 +02:00
Sylvia van Os
969616d671
Date compare in DB instead of model function
2021-05-17 18:20:35 +02:00
Sylvia van Os
bee468e055
Black
2021-05-15 18:04:50 +02:00
Sylvia van Os
f67f5297f2
Add HIBP checks
2021-05-14 19:50:32 +02:00
Son NK
ef2eb7f959
add Paddle subscription_id in admin
2021-05-14 16:10:34 +02:00
Son NK
edaf293398
Create admin pages for Referral and Payout
2021-05-10 15:51:39 +02:00
Son NK
93a8873192
show payouts on referral page
2021-05-10 13:03:44 +02:00
Son NK
229d2c644b
Add Payout model
2021-05-10 13:03:19 +02:00
Son NK
5317b8ab84
move the api key page back to menu
2021-05-05 18:51:15 +02:00
Son NK
e5926978c8
use bouncer on custom alias page
2021-04-30 11:45:00 +02:00
Son NK
ceacf8e3a7
support dot in alias prefix
2021-04-30 11:37:17 +02:00
Son NK
e74dbd7e98
increase monthly plan to $4
2021-04-23 12:08:27 +02:00
Son NK
c5697fbf3c
remove unused import
2021-04-23 12:07:49 +02:00
Son NK
7946879308
schedule account deletion
2021-04-23 11:50:26 +02:00
Son NK
f3b04b9d81
add more logging
2021-04-16 18:37:16 +02:00
Son NK
0039b4c301
disable an alias if the user has too many bounces recently
2021-04-16 17:57:25 +02:00
Son NK
cfb52a2eba
add price mention on billing page
2021-04-12 10:14:35 +02:00
Son NK
5040e7b74b
add filters for alias and mailbox admin
2021-04-12 10:07:17 +02:00
Son NK
9bfd9ebf07
fix
2021-04-09 12:46:51 +02:00
Son NK
aad1270e0d
free trial account can't create more than MAX_NB_EMAIL_FREE_PLAN aliases
2021-04-09 12:40:55 +02:00
Son NK
f45e7b53d0
create admin for Client
2021-04-06 19:46:38 +02:00
Son NK
f8540808bc
remove Client.published
2021-04-06 19:46:21 +02:00
Son NK
e42fb0816d
Improve SIWSL wording
2021-04-06 18:12:06 +02:00
Son NK
ea5281de95
automatically show how-to-use
2021-04-06 18:10:32 +02:00
Son NK
7c1af6a265
improve should_disable(): take into account repetitive bounces
2021-04-06 17:24:06 +02:00
Son NK
c715f87526
improve SIWSL UI
2021-04-06 12:06:46 +02:00
Son NK
9e4ff01b17
improve login, register UI
2021-04-06 12:06:11 +02:00
Son NK
af9597cf5a
improve copy when app isn't approved
2021-04-01 18:10:39 +02:00
Son NK
085dec069b
allow any redirect_uri if the app isn't approved
2021-04-01 18:04:45 +02:00
Son NK
03976ea1c2
improve copy in app approval
2021-04-01 18:04:35 +02:00
Son NK
9757b12b95
user can remove the app link
2021-04-01 14:20:13 +02:00
Son NK
efae1710c8
extract the app/website to a separate page
2021-04-01 14:09:16 +02:00
Son NK
3c4a1413e0
Remove ClientUser.nonce
2021-04-01 12:49:32 +02:00
Son NK
e6d8815ac5
take into account nonce in openid
2021-04-01 12:49:23 +02:00
Son NK
da17f51778
add AuthorizationCode.nonce
2021-04-01 12:35:21 +02:00