Son NK
|
fdedc24358
|
black new version
|
2020-08-27 10:20:48 +02:00 |
|
Son NK
|
b7cbaa6e84
|
delete the expired ChangeEmail object
|
2020-08-13 10:59:39 +02:00 |
|
Son NK
|
b395c2ebd0
|
use warning log for FIDO error
|
2020-08-12 12:48:51 +02:00 |
|
Son NK
|
efe1ab641f
|
add hCaptcha check
|
2020-07-23 12:43:55 +02:00 |
|
Son NK
|
6437ee46e0
|
use LOG.exception instead of LOG.error to provide stacktrace
|
2020-07-17 12:59:07 +02:00 |
|
Son NK
|
c41bffbbae
|
refactor: use SESSION_COOKIE_NAME instead of hardcoding "slapp"
|
2020-06-28 21:17:18 +02:00 |
|
Son NK
|
4ee38823b8
|
make sure to strip and lower email
|
2020-06-11 23:35:24 +02:00 |
|
Son NK
|
fa06c5cd4b
|
make sure user cannot reuse the old password
|
2020-05-30 19:50:33 +02:00 |
|
Sibren Vasse
|
31a1f94a5f
|
Implement rate limiting
|
2020-05-25 11:39:33 +02:00 |
|
Sibren Vasse
|
3c7e03f83d
|
Add remember option to FIDO mfa path
|
2020-05-24 19:23:16 +02:00 |
|
Sibren Vasse
|
097ac771b0
|
Prevent OTP replay attacks by invalidating last token
|
2020-05-24 19:23:16 +02:00 |
|
Sibren Vasse
|
35bb1645a3
|
Allow user to disable mfa for browser for 30 days
|
2020-05-24 19:23:16 +02:00 |
|
Sibren Vasse
|
8c946d7026
|
Remove token when submitted value is incorrect
|
2020-05-24 19:23:16 +02:00 |
|
Son Nguyen Kim
|
eb60028b1f
|
Merge pull request #199 from developStorm/webauthn-multiple-keys
Support Multiple Keys for WebAuthn
|
2020-05-24 18:56:42 +02:00 |
|
Son NK
|
93d972df09
|
make sure to use lowercase for alias email
|
2020-05-20 18:12:14 +02:00 |
|
devStorm
|
7bd97e13b0
|
fido_model -> fidos
|
2020-05-18 13:55:38 -07:00 |
|
devStorm
|
ea914e0378
|
Rename FIDO->Fido
|
2020-05-18 13:54:05 -07:00 |
|
devStorm
|
35f0c094fe
|
black
|
2020-05-18 01:04:45 -07:00 |
|
devStorm
|
419aa95f1f
|
more verify
|
2020-05-18 01:02:58 -07:00 |
|
devStorm
|
ec91d280bb
|
Verify
|
2020-05-18 00:08:06 -07:00 |
|
Son NK
|
87d52216cb
|
reformat
|
2020-05-17 10:35:11 +02:00 |
|
Son NK
|
20e66edbaa
|
fix redirection to next page
|
2020-05-17 10:28:00 +02:00 |
|
Son NK
|
2e208ed505
|
display recovery code options on mfa and fido page
|
2020-05-17 10:27:20 +02:00 |
|
Son NK
|
da4e0bf384
|
create /auth/recovery page
|
2020-05-17 10:17:52 +02:00 |
|
Son NK
|
7ed77a66b2
|
format
|
2020-05-15 23:18:42 +02:00 |
|
Son NK
|
2978bfb281
|
Fix user cannot change personal email back and better naming.
Happens when user
- changes their personal email
- wants to change back: they can't as this email is already used as mailbox
|
2020-05-15 23:18:30 +02:00 |
|
devStorm
|
a9967c9a4d
|
Auto activate WebAuthn authentication
|
2020-05-11 19:17:51 -07:00 |
|
Son NK
|
cde8452e5b
|
Fix Google oauth_state KeyError
|
2020-05-10 11:34:32 +02:00 |
|
Son NK
|
b95b758692
|
Optimize imports
|
2020-05-09 20:49:38 +02:00 |
|
devStorm
|
d236f906ad
|
🐛 WebAuthn bug fixes
- User may not have name
- user_verification should be discouraged to work on iOS
|
2020-05-08 14:21:38 -07:00 |
|
Son NK
|
ccb30a2def
|
disable sign-up via social login
|
2020-05-07 22:01:14 +02:00 |
|
Son NK
|
18d62a81d1
|
add User.can_use_fido
|
2020-05-07 17:56:25 +02:00 |
|
Son NK
|
84c529c867
|
optimize import
|
2020-05-07 17:49:29 +02:00 |
|
Son NK
|
fe1262686e
|
black format
|
2020-05-07 17:48:44 +02:00 |
|
devStorm
|
2290a90b09
|
Use try-else 9b8340f3e0 (r421465450)
|
2020-05-07 05:41:34 -07:00 |
|
devStorm
|
b0c39635a5
|
Remove credential_id variable
|
2020-05-07 05:37:03 -07:00 |
|
devStorm
|
e4895b52a0
|
fix SITE_URL
|
2020-05-07 05:34:17 -07:00 |
|
devStorm
|
f7e3320242
|
model - fido_enabled
|
2020-05-07 05:32:52 -07:00 |
|
devStorm
|
9b8340f3e0
|
Black formatted
|
2020-05-07 02:53:28 -07:00 |
|
devStorm
|
0052dad13e
|
Do not show full error msg to user
|
2020-05-07 02:48:56 -07:00 |
|
devStorm
|
282cbe25a3
|
Calculate RP_ID in config
|
2020-05-07 02:39:30 -07:00 |
|
devStorm
|
3ab3f819b7
|
Make RP_ID a constant
|
2020-05-07 02:33:24 -07:00 |
|
devStorm
|
b8b1313db9
|
typo 'infomation'
|
2020-05-07 02:31:42 -07:00 |
|
devStorm
|
ced02a8f20
|
remove debug code
|
2020-05-05 14:26:26 -07:00 |
|
devStorm
|
fc001cfc24
|
fix exception handling
|
2020-05-05 14:13:01 -07:00 |
|
devStorm
|
9da6054ec0
|
Allow to use either OTP or FIDO for 2FA
|
2020-05-05 05:16:33 -07:00 |
|
devStorm
|
650d6e35f0
|
FIDO login middleware
|
2020-05-05 05:03:29 -07:00 |
|
devStorm
|
286b1143ca
|
Store sign count
|
2020-05-05 03:16:52 -07:00 |
|
Son NK
|
96366ddcfa
|
Deprecate social login, prettify some pages
|
2020-04-27 23:08:21 +02:00 |
|
Son NK
|
a069fe7b6a
|
do not return error when user doesn't exist on forgot_password
|
2020-04-27 22:57:55 +02:00 |
|