Tag: Branch: Tree: e1d93da7a6

develop

indiachan

indiachan-spamvector

jschan

master

0.1.4

v0.1.1

v0.1.10

v0.1.2

v0.1.3

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.1.9

v0.10.0

v0.10.1

v0.10.2

v0.11.0

v0.11.1

v0.11.2

v0.11.3

v0.11.4

v0.2.0

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.4.0

v0.4.1

v0.5.0

v0.5.1

v0.5.2

v0.5.3

v0.6.0

v0.6.1

v0.6.2

v0.6.3

v0.6.4

v0.6.5

v0.6.6

v0.7.0

v0.7.1

v0.7.2

v0.7.3

v0.8.0

v0.8.1

v0.8.2

v0.9.0

v0.9.1

v0.9.2

v0.9.3

v0.9.4

v1.0.0

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.0.5

v1.0.6

v1.1.0

v1.1.1

v1.2.0

v1.2.1

v1.3.0

v1.3.1

v1.3.2

v1.3.3

v1.4.0

v1.4.1

v1.6.0

v1.6.1

v1.6.2

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'e1d93da7a6'

${ noResults }

Commit Graph

4 Commits (e1d93da7a61c0a526ec3685aa93fa9c5d2ffd76e)

Author	SHA1	Message	Date
Thomas Lynch	29bb4856ab	2fa improvements ... - Don't allow code re-use, successfully used codes will be invalid on repeated use for the window time - Don't attach the full twofactor secret to user object in session for security. Only store a boolean if it's enabled for rendering, checks, etc. The full account should be fetched first before doTwoFactor() - Better names for some keys of twofactor redis stuff	2 years ago
Thomas Lynch	e5d0f9871f	Add text version of secret to twofactor.html for people without/who dont want to use a camera or screenshot the image ... Add warning to twofactor.html that other sessions will be logged out and they have to log in again Change cache-control header to no-cache, even though private is secure (prevent showing cached page without outdated secret)	2 years ago
Thomas Lynch	b93bab7faf	Switch speakeasy -> otpauth (maintained, more modern, actively developed) ... Remove dev debug skip of 2fa generation ratelimit Shorten totp validity window Remove ugly stuff from login/changepassword forms, change wording	2 years ago
Thomas Lynch	4d86406483	Initial commit of 2FA for accounts, TOTP-based	2 years ago