- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Advanced Search
Sat, Feb 15
Tue, Feb 11
Wed, Jan 29
Mon, Jan 27
In D5090#64308, @machniak wrote:When $verifyMFA=true you still call hash() and store it in the cache. When using $verifyMFA=false that hash would be used. If you add to this not using $clientIP it looks to me like a potential geo-lock bypass.
Addressed comments
Jan 14 2025
Lookup by id
Jan 10 2025
Jan 8 2025
Jan 6 2025
Moved the token validation to findAndAuthenticate, so we can skip mfa when a token has been validated.
Comment style
Now with an actual test
Addressed comments
Jan 2 2025
Jan 1 2025
Dec 27 2024
Dec 24 2024
Can be shipped after that adjustments IMO.
I think because of the latest change, this is now required:
Dec 23 2024
Dec 19 2024
It's a bit of a mess indeed.
I think it's not needed because default_port will be ignored if the port is part of the host string.
I'm unsure how to clean this up without breaking anything, so I'll just stick to doing what we do elsewhere.
Adjust to doing the same as iRony/syncroton