13 commits

Author	SHA1	Message	Date
Sibren Vasse	31a1f94a5f	Implement rate limiting	2020-05-25 11:39:33 +02:00
Sibren Vasse	097ac771b0	Prevent OTP replay attacks by invalidating last token	2020-05-24 19:23:16 +02:00
Sibren Vasse	35bb1645a3	Allow user to disable mfa for browser for 30 days	2020-05-24 19:23:16 +02:00
Sibren Vasse	8c946d7026	Remove token when submitted value is incorrect	2020-05-24 19:23:16 +02:00
Son NK	87d52216cb	reformat	2020-05-17 10:35:11 +02:00
Son NK	2e208ed505	display recovery code options on mfa and fido page	2020-05-17 10:27:20 +02:00
devStorm	f7e3320242	model - fido_enabled	2020-05-07 05:32:52 -07:00
devStorm	9b8340f3e0	Black formatted	2020-05-07 02:53:28 -07:00
devStorm	9da6054ec0	Allow to use either OTP or FIDO for 2FA	2020-05-05 05:16:33 -07:00
Son NK	837ab8258e	redirect to login page instead	2020-01-03 23:50:34 +01:00
Son NK	4208ba379f	Fix user could go to MFA page directly	2020-01-03 23:42:35 +01:00
Son NK	de0368c20f	remove redundant code	2019-12-27 16:53:07 +00:00
Son NK	c52f2d1603	Create auth/mfa page used by user who has enabled MFA	2019-12-27 16:53:07 +00:00