James Smith
|
05a35ca2e6
|
DRY up first use check
|
2025-10-28 11:23:46 +00:00 |
|
James Smith
|
97f23c25b2
|
add rate limits for signup and login
|
2025-06-09 21:17:32 +01:00 |
|
James Smith
|
5e9962c62c
|
make use of "sign in" more consistent
|
2025-04-23 17:35:41 +01:00 |
|
James Smith
|
83416be9b4
|
move random password generation into helper
|
2024-11-21 18:34:23 +00:00 |
|
James Smith
|
f581b6ed8b
|
handle admin setup in forced OIDC mode
|
2024-10-15 16:38:18 +01:00 |
|
James Smith
|
99bcfd01a2
|
swap flipper checks for SiteSettings checks
|
2024-08-09 11:26:18 +01:00 |
|
James Smith
|
4ba937e366
|
auto-login admin on first run in multiuser mode
|
2024-07-16 17:35:36 +01:00 |
|
James Smith
|
cedff3719f
|
mitigate timing attacks on session/registration/password creation methods
so that attackers can't enumerate accounts that exist as easily.
|
2024-06-18 16:06:13 +01:00 |
|
James Smith
|
9910009d88
|
Completely reset session on logout
|
2024-06-18 13:35:11 +01:00 |
|
James Smith
|
2abd5a070c
|
add trailing number and letters to admin password to force it to always pass requirements
|
2024-04-09 11:44:16 +01:00 |
|
James Smith
|
1e6072ed61
|
autogenerate a compliant password for admin user
|
2024-03-26 15:36:25 +00:00 |
|
James Smith
|
5b337e247b
|
set reset password token to a known value for first use
for both new admin users, and old ones.
|
2024-03-22 15:04:15 +00:00 |
|
James Smith
|
575eb966ce
|
change admin status and checks to use new rolify role instead of boolean flag
|
2024-03-21 14:53:58 +00:00 |
|
James Smith
|
2b856aac80
|
improve autocreated user for single login and change to lazy creation
|
2024-03-21 14:26:30 +00:00 |
|
James Smith
|
aa3e96c21f
|
set up authorization for sessions controller and move autologin into there
|
2024-03-18 16:12:00 +00:00 |
|