126 commits

Author	SHA1	Message	Date
Son Nguyen Kim	99599bb09f	make sure user needs to go through MFA when resetting password	2021-07-12 18:56:09 +02:00
Son NK	09d00df363	reformat imports	2021-06-27 17:50:36 +02:00
Son NK	f3b04b9d81	add more logging	2021-04-16 18:37:16 +02:00
Son NK	b476e207fa	take into account ?next param in login	2021-01-27 10:11:48 +01:00
Son NK	e9adb3270d	use sanitize_email instead of .lower().strip().replace(" ", "")	2021-01-11 12:29:40 +01:00
Son NK	ef7fae32b1	remove the "Hi {name}" from email template	2021-01-11 10:23:34 +01:00
Renaud Boyer	c09b6ef675	linting	2020-12-06 22:08:35 +01:00
Renaud Boyer	1c73f07d18	linting	2020-12-06 22:08:05 +01:00
Son NK	0a4fc76b61	optimize import	2020-10-15 16:45:28 +02:00
Son NK	90163220cf	rename email_domain_can_be_used_as_mailbox -> email_can_be_used_as_mailbox	2020-10-15 16:05:47 +02:00
Son NK	7e425c0338	disable login if user is disabled	2020-10-04 12:49:43 +02:00
Son NK	fdedc24358	black new version	2020-08-27 10:20:48 +02:00
Son NK	b7cbaa6e84	delete the expired ChangeEmail object	2020-08-13 10:59:39 +02:00
Son NK	b395c2ebd0	use warning log for FIDO error	2020-08-12 12:48:51 +02:00
Son NK	efe1ab641f	add hCaptcha check	2020-07-23 12:43:55 +02:00
Son NK	6437ee46e0	use LOG.exception instead of LOG.error to provide stacktrace	2020-07-17 12:59:07 +02:00
Son NK	c41bffbbae	refactor: use SESSION_COOKIE_NAME instead of hardcoding "slapp"	2020-06-28 21:17:18 +02:00
Son NK	4ee38823b8	make sure to strip and lower email	2020-06-11 23:35:24 +02:00
Son NK	fa06c5cd4b	make sure user cannot reuse the old password	2020-05-30 19:50:33 +02:00
Sibren Vasse	31a1f94a5f	Implement rate limiting	2020-05-25 11:39:33 +02:00
Sibren Vasse	3c7e03f83d	Add remember option to FIDO mfa path	2020-05-24 19:23:16 +02:00
Sibren Vasse	097ac771b0	Prevent OTP replay attacks by invalidating last token	2020-05-24 19:23:16 +02:00
Sibren Vasse	35bb1645a3	Allow user to disable mfa for browser for 30 days	2020-05-24 19:23:16 +02:00
Sibren Vasse	8c946d7026	Remove token when submitted value is incorrect	2020-05-24 19:23:16 +02:00
Son Nguyen Kim	eb60028b1f	Merge pull request #199 from developStorm/webauthn-multiple-keys ... Support Multiple Keys for WebAuthn	2020-05-24 18:56:42 +02:00
Son NK	93d972df09	make sure to use lowercase for alias email	2020-05-20 18:12:14 +02:00
devStorm	7bd97e13b0	fido_model -> fidos	2020-05-18 13:55:38 -07:00
devStorm	ea914e0378	Rename FIDO->Fido	2020-05-18 13:54:05 -07:00
devStorm	35f0c094fe	black	2020-05-18 01:04:45 -07:00
devStorm	419aa95f1f	more verify	2020-05-18 01:02:58 -07:00
devStorm	ec91d280bb	Verify	2020-05-18 00:08:06 -07:00
Son NK	87d52216cb	reformat	2020-05-17 10:35:11 +02:00
Son NK	20e66edbaa	fix redirection to next page	2020-05-17 10:28:00 +02:00
Son NK	2e208ed505	display recovery code options on mfa and fido page	2020-05-17 10:27:20 +02:00
Son NK	da4e0bf384	create /auth/recovery page	2020-05-17 10:17:52 +02:00
Son NK	7ed77a66b2	format	2020-05-15 23:18:42 +02:00
Son NK	2978bfb281	Fix user cannot change personal email back and better naming. ... Happens when user - changes their personal email - wants to change back: they can't as this email is already used as mailbox	2020-05-15 23:18:30 +02:00
devStorm	a9967c9a4d	Auto activate WebAuthn authentication	2020-05-11 19:17:51 -07:00
Son NK	cde8452e5b	Fix Google oauth_state KeyError	2020-05-10 11:34:32 +02:00
Son NK	b95b758692	Optimize imports	2020-05-09 20:49:38 +02:00
devStorm	d236f906ad	🐛 WebAuthn bug fixes ... - User may not have name - user_verification should be discouraged to work on iOS	2020-05-08 14:21:38 -07:00
Son NK	ccb30a2def	disable sign-up via social login	2020-05-07 22:01:14 +02:00
Son NK	18d62a81d1	add User.can_use_fido	2020-05-07 17:56:25 +02:00
Son NK	84c529c867	optimize import	2020-05-07 17:49:29 +02:00
Son NK	fe1262686e	black format	2020-05-07 17:48:44 +02:00
devStorm	2290a90b09	Use try-else 9b8340f3e0 (r421465450)	2020-05-07 05:41:34 -07:00
devStorm	b0c39635a5	Remove credential_id variable	2020-05-07 05:37:03 -07:00
devStorm	e4895b52a0	fix SITE_URL	2020-05-07 05:34:17 -07:00
devStorm	f7e3320242	model - fido_enabled	2020-05-07 05:32:52 -07:00
devStorm	9b8340f3e0	Black formatted	2020-05-07 02:53:28 -07:00