-
- Downloads
Verify selfservice link secrets in constant-time
This affects mail verification and password reset links. Existing links continue to work. However support for legacy links (without id) is deprecated and will be removed in the future.
Showing
- tests/test_selfservice.py 17 additions, 16 deletionstests/test_selfservice.py
- uffd/migrations/versions/e9a67175e179_add_id_to_selfservice_tokens.py 65 additions, 0 deletions...ons/versions/e9a67175e179_add_id_to_selfservice_tokens.py
- uffd/selfservice/models.py 9 additions, 7 deletionsuffd/selfservice/models.py
- uffd/selfservice/templates/selfservice/mailverification.mail.txt 1 addition, 1 deletion...lfservice/templates/selfservice/mailverification.mail.txt
- uffd/selfservice/templates/selfservice/newuser.mail.txt 1 addition, 1 deletionuffd/selfservice/templates/selfservice/newuser.mail.txt
- uffd/selfservice/templates/selfservice/passwordreset.mail.txt 1 addition, 1 deletion.../selfservice/templates/selfservice/passwordreset.mail.txt
- uffd/selfservice/templates/selfservice/set_password.html 1 addition, 1 deletionuffd/selfservice/templates/selfservice/set_password.html
- uffd/selfservice/views.py 42 additions, 14 deletionsuffd/selfservice/views.py
Loading
Please sign in to comment