Commit Graph
15 Commits
Author SHA1 Message Date
James Smith 05a35ca2e6 DRY up first use check 2025-10-28 11:23:46 +00:00
James Smith 97f23c25b2 add rate limits for signup and login 2025-06-09 21:17:32 +01:00
James Smith 5e9962c62c make use of "sign in" more consistent 2025-04-23 17:35:41 +01:00
James Smith 83416be9b4 move random password generation into helper 2024-11-21 18:34:23 +00:00
James Smith f581b6ed8b handle admin setup in forced OIDC mode 2024-10-15 16:38:18 +01:00
James Smith 99bcfd01a2 swap flipper checks for SiteSettings checks 2024-08-09 11:26:18 +01:00
James Smith 4ba937e366 auto-login admin on first run in multiuser mode 2024-07-16 17:35:36 +01:00
James Smith cedff3719f mitigate timing attacks on session/registration/password creation methods
so that attackers can't enumerate accounts that exist as easily.
2024-06-18 16:06:13 +01:00
James Smith 9910009d88 Completely reset session on logout 2024-06-18 13:35:11 +01:00
James Smith 2abd5a070c add trailing number and letters to admin password to force it to always pass requirements 2024-04-09 11:44:16 +01:00
James Smith 1e6072ed61 autogenerate a compliant password for admin user 2024-03-26 15:36:25 +00:00
James Smith 5b337e247b set reset password token to a known value for first use
for both new admin users, and old ones.
2024-03-22 15:04:15 +00:00
James Smith 575eb966ce change admin status and checks to use new rolify role instead of boolean flag 2024-03-21 14:53:58 +00:00
James Smith 2b856aac80 improve autocreated user for single login and change to lazy creation 2024-03-21 14:26:30 +00:00
James Smith aa3e96c21f set up authorization for sessions controller and move autologin into there 2024-03-18 16:12:00 +00:00