932 commits

Author	SHA1	Message	Date
Son Nguyen Kim	5fa2a86f23	Merge pull request #170 from developStorm/webauthn-patch ... 🐛 WebAuthn bug fixes	2020-05-09 18:05:34 +02:00
Son Nguyen Kim	54b32be321	Merge pull request #174 from simple-login/spf-update ... Spf update	2020-05-09 18:04:43 +02:00
Son Nguyen Kim	16d8737770	Merge pull request #171 from SibrenVasse/secure_cookie ... Session cookie flags.	2020-05-09 18:03:15 +02:00
Son NK	295c2fd03f	Hide the SPF toggle	2020-05-09 17:34:59 +02:00
Son NK	2d8f056e11	Fix wording	2020-05-09 17:26:26 +02:00
Son Nguyen Kim	e23887bb37	Merge pull request #164 from SibrenVasse/spf ... Enforce SPF	2020-05-09 14:37:09 +02:00
Sibren Vasse	001079bdc5	Enforce SPF	2020-05-09 14:15:08 +02:00
Sibren Vasse	e7c3a127b8	Set samesite and secure attributes of session cookie. Enable strong session protection.	2020-05-09 14:13:37 +02:00
devStorm	d236f906ad	🐛 WebAuthn bug fixes ... - User may not have name - user_verification should be discouraged to work on iOS	2020-05-08 14:21:38 -07:00
Son NK	e68eab44b0	allow user who has TOTP enabled to continue using the mobile app	2020-05-08 20:23:13 +02:00
Son NK	75a28c53cf	fix grammar mistake	2020-05-08 13:40:21 +02:00
Son NK	ad194c46f2	remove lifetime licence in pricing page	2020-05-08 12:38:42 +02:00
Son Nguyen Kim	18e50e4a28	Merge pull request #167 from simple-login/disable-social-login-signup ... disable sign-up via social login	2020-05-07 22:02:08 +02:00
Son NK	ccb30a2def	disable sign-up via social login	2020-05-07 22:01:14 +02:00
Son Nguyen Kim	a785e664e9	Merge pull request #165 from simple-login/same-mailbox-different-user ... Same mailbox different user	2020-05-07 21:56:36 +02:00
Son NK	f929f23acc	return 403 if user enables FIDO	2020-05-07 21:54:36 +02:00
Son NK	c85ea1538e	Allow the same mailbox used by different user	2020-05-07 21:47:11 +02:00
Son NK	f8e896541d	replace Mailbox.email unique constraint by (email, user_id)	2020-05-07 21:46:16 +02:00
Son NK	806f7016ae	fix: wrongly set alias custom_domain when custom_domain is in EMAIL_ALIAS	2020-05-07 20:48:11 +02:00
Son NK	101ab408b2	black format	2020-05-07 18:01:12 +02:00
Son NK	4709237b92	only user with can_use_fido can use fido	2020-05-07 17:58:24 +02:00
Son NK	18d62a81d1	add User.can_use_fido	2020-05-07 17:56:25 +02:00
Son NK	84c529c867	optimize import	2020-05-07 17:49:29 +02:00
Son NK	fe1262686e	black format	2020-05-07 17:48:44 +02:00
Son Nguyen Kim	e35fb631cf	Merge pull request #159 from developStorm/master ... Implement WebAuthn	2020-05-07 17:47:06 +02:00
devStorm	2290a90b09	Use try-else 9b8340f3e0 (r421465450)	2020-05-07 05:41:34 -07:00
devStorm	b0c39635a5	Remove credential_id variable	2020-05-07 05:37:03 -07:00
devStorm	e4895b52a0	fix SITE_URL	2020-05-07 05:34:17 -07:00
devStorm	f7e3320242	model - fido_enabled	2020-05-07 05:32:52 -07:00
devStorm	9b8340f3e0	Black formatted	2020-05-07 02:53:28 -07:00
devStorm	0052dad13e	Do not show full error msg to user	2020-05-07 02:48:56 -07:00
devStorm	282cbe25a3	Calculate RP_ID in config	2020-05-07 02:39:30 -07:00
devStorm	c38b3c768c	fix SimpleLogin brand name	2020-05-07 02:34:19 -07:00
devStorm	3ab3f819b7	Make RP_ID a constant	2020-05-07 02:33:24 -07:00
devStorm	b8b1313db9	typo 'infomation'	2020-05-07 02:31:42 -07:00
Son NK	16de59a9f5	mailbox can be other user's email	2020-05-06 12:34:52 +02:00
Son NK	35b1972730	increase the expired alias creation session to 600 secs	2020-05-06 10:10:47 +02:00
Son NK	d9e9a54082	add more info in "alias expire" error	2020-05-06 10:09:17 +02:00
Son NK	e9d03d1d4b	Handle the case where a deleted mailbox verification link is clicked	2020-05-06 10:06:05 +02:00
devStorm	ced02a8f20	remove debug code	2020-05-05 14:26:26 -07:00
devStorm	fc001cfc24	fix exception handling	2020-05-05 14:13:01 -07:00
devStorm	370b71ebd3	Setting page options	2020-05-05 05:28:27 -07:00
devStorm	9da6054ec0	Allow to use either OTP or FIDO for 2FA	2020-05-05 05:16:33 -07:00
devStorm	650d6e35f0	FIDO login middleware	2020-05-05 05:03:29 -07:00
Son NK	103418dff7	Strip off http:// or https:// prefix in domain	2020-05-05 12:46:32 +02:00
Son NK	3eb904c882	set max length for domain	2020-05-05 12:46:11 +02:00
devStorm	286b1143ca	Store sign count	2020-05-05 03:16:52 -07:00
devStorm	705941b8b8	Unlink security key	2020-05-05 02:20:52 -07:00
devStorm	a32b69078f	Key registration (Backend)	2020-05-05 01:58:42 -07:00
devStorm	3ce4dfb371	Security key setup page (front-end)	2020-05-05 01:32:49 -07:00