131 commits

Author	SHA1	Message	Date
Son NK	efe1ab641f	add hCaptcha check	2020-07-23 12:43:55 +02:00
Son NK	6437ee46e0	use LOG.exception instead of LOG.error to provide stacktrace	2020-07-17 12:59:07 +02:00
Son NK	c41bffbbae	refactor: use SESSION_COOKIE_NAME instead of hardcoding "slapp"	2020-06-28 21:17:18 +02:00
Son NK	4ee38823b8	make sure to strip and lower email	2020-06-11 23:35:24 +02:00
Son NK	fa06c5cd4b	make sure user cannot reuse the old password	2020-05-30 19:50:33 +02:00
George	a87f7e4be9	Change words	2020-05-27 21:53:48 +01:00
George	d9e29cc989	Reword 2FA page.	2020-05-27 19:49:13 +01:00
Sibren Vasse	31a1f94a5f	Implement rate limiting	2020-05-25 11:39:33 +02:00
Sibren Vasse	3c7e03f83d	Add remember option to FIDO mfa path	2020-05-24 19:23:16 +02:00
Sibren Vasse	097ac771b0	Prevent OTP replay attacks by invalidating last token	2020-05-24 19:23:16 +02:00
Sibren Vasse	35bb1645a3	Allow user to disable mfa for browser for 30 days	2020-05-24 19:23:16 +02:00
Sibren Vasse	e15ab7f932	Add autofocus to login screen	2020-05-24 19:23:16 +02:00
Sibren Vasse	8c946d7026	Remove token when submitted value is incorrect	2020-05-24 19:23:16 +02:00
Son Nguyen Kim	eb60028b1f	Merge pull request #199 from developStorm/webauthn-multiple-keys ... Support Multiple Keys for WebAuthn	2020-05-24 18:56:42 +02:00
Son NK	93d972df09	make sure to use lowercase for alias email	2020-05-20 18:12:14 +02:00
devStorm	7bd97e13b0	fido_model -> fidos	2020-05-18 13:55:38 -07:00
devStorm	ea914e0378	Rename FIDO->Fido	2020-05-18 13:54:05 -07:00
devStorm	c0a751ff13	Put button inside the form	2020-05-18 13:45:02 -07:00
devStorm	35f0c094fe	black	2020-05-18 01:04:45 -07:00
devStorm	419aa95f1f	more verify	2020-05-18 01:02:58 -07:00
devStorm	ec91d280bb	Verify	2020-05-18 00:08:06 -07:00
Son NK	87d52216cb	reformat	2020-05-17 10:35:11 +02:00
Son NK	20e66edbaa	fix redirection to next page	2020-05-17 10:28:00 +02:00
Son NK	2e208ed505	display recovery code options on mfa and fido page	2020-05-17 10:27:20 +02:00
Son NK	da4e0bf384	create /auth/recovery page	2020-05-17 10:17:52 +02:00
Son NK	7ed77a66b2	format	2020-05-15 23:18:42 +02:00
Son NK	2978bfb281	Fix user cannot change personal email back and better naming. ... Happens when user - changes their personal email - wants to change back: they can't as this email is already used as mailbox	2020-05-15 23:18:30 +02:00
devStorm	a9967c9a4d	Auto activate WebAuthn authentication	2020-05-11 19:17:51 -07:00
Son NK	70e842789e	make pages compatible with dark-theme	2020-05-11 23:22:15 +02:00
Son NK	cde8452e5b	Fix Google oauth_state KeyError	2020-05-10 11:34:32 +02:00
Son NK	b95b758692	Optimize imports	2020-05-09 20:49:38 +02:00
devStorm	d236f906ad	🐛 WebAuthn bug fixes ... - User may not have name - user_verification should be discouraged to work on iOS	2020-05-08 14:21:38 -07:00
Son NK	ccb30a2def	disable sign-up via social login	2020-05-07 22:01:14 +02:00
Son NK	18d62a81d1	add User.can_use_fido	2020-05-07 17:56:25 +02:00
Son NK	84c529c867	optimize import	2020-05-07 17:49:29 +02:00
Son NK	fe1262686e	black format	2020-05-07 17:48:44 +02:00
devStorm	2290a90b09	Use try-else 9b8340f3e0 (r421465450)	2020-05-07 05:41:34 -07:00
devStorm	b0c39635a5	Remove credential_id variable	2020-05-07 05:37:03 -07:00
devStorm	e4895b52a0	fix SITE_URL	2020-05-07 05:34:17 -07:00
devStorm	f7e3320242	model - fido_enabled	2020-05-07 05:32:52 -07:00
devStorm	9b8340f3e0	Black formatted	2020-05-07 02:53:28 -07:00
devStorm	0052dad13e	Do not show full error msg to user	2020-05-07 02:48:56 -07:00
devStorm	282cbe25a3	Calculate RP_ID in config	2020-05-07 02:39:30 -07:00
devStorm	3ab3f819b7	Make RP_ID a constant	2020-05-07 02:33:24 -07:00
devStorm	b8b1313db9	typo 'infomation'	2020-05-07 02:31:42 -07:00
devStorm	ced02a8f20	remove debug code	2020-05-05 14:26:26 -07:00
devStorm	fc001cfc24	fix exception handling	2020-05-05 14:13:01 -07:00
devStorm	9da6054ec0	Allow to use either OTP or FIDO for 2FA	2020-05-05 05:16:33 -07:00
devStorm	650d6e35f0	FIDO login middleware	2020-05-05 05:03:29 -07:00
devStorm	286b1143ca	Store sign count	2020-05-05 03:16:52 -07:00