6 commits

Author	SHA1	Message	Date
Hugh Rundle	6db4fb39ed	improve security and fix error msg ... - Instead of passing the user as a hidden form element, we use a session variable. - Introduces a 60 second limit on completing the login, and an exponentially increasing delay to attempt to login with 2FA if the code is entered incorrectly. - use proper Django form error when incorrect otp value entered	2022-10-15 07:47:20 +11:00
Hugh Rundle	9d12b7caff	make pylint stop grumbling	2022-10-15 07:47:20 +11:00
Hugh Rundle	0e1751eb57	prep for 2fa login check ... - new 2fa checker page to be inserted between initial login and completion of login - new views and forms for above	2022-10-15 07:47:20 +11:00
Hugh Rundle	54daade9f9	prepare for 2FA ... - add and migrate User fields for 2FA - add views for 2FA - add new forms for 2FA - update package list in requirements.txt - add URLs for 2FA views	2022-10-15 07:47:20 +11:00
Mouse Reeve	659ee96002	Use password validation in change password flow ... This also moves the form validation into a form instead of doing it in the view.	2022-07-15 10:51:58 -07:00
Mouse Reeve	d3f723a07d	Splits forms into separate files	2022-03-14 12:06:50 -07:00