7 commits

Author	SHA1	Message	Date
Mouse Reeve	eae1866992	Allow users to temporarily deactivate their accounts (#2324)	2022-11-10 13:40:54 -08:00
Hugh Rundle	9b74c26742	backup codes ... - add hotp_secret to user model - view to create backup codes in user prefs - check backup code if otp doesn't work - increment hotp count if used - show correct errors if code wrong	2022-10-15 07:47:20 +11:00
Hugh Rundle	6db4fb39ed	improve security and fix error msg ... - Instead of passing the user as a hidden form element, we use a session variable. - Introduces a 60 second limit on completing the login, and an exponentially increasing delay to attempt to login with 2FA if the code is entered incorrectly. - use proper Django form error when incorrect otp value entered	2022-10-15 07:47:20 +11:00
Mouse Reeve	3846b201bd	Updates reset password flow to use validators	2022-07-15 11:39:18 -07:00
Mouse Reeve	4a65ee326a	Use password validation in register view	2022-07-15 09:59:57 -07:00
Mouse Reeve	7b3b357756	Merge branch 'main' into form-conflict	2022-03-16 16:51:57 -07:00
Mouse Reeve	d3f723a07d	Splits forms into separate files	2022-03-14 12:06:50 -07:00