Repository navigation
Conversation
- Updated `MfaMiddleware` to challenge sessions that were opened before the user enrolled in MFA, treating them as pending after enrollment. - Ensured that users with previously open sessions are redirected to the MFA verification page upon enrollment. - Added tests to verify the behavior of sessions opened without a factor and their handling after enrollment. - Bumped version to 4.6.1 to reflect these changes.
- Corrected the `fido2` dependency floor in the changelog to `fido2>=2.0.0,<3` to prevent installation issues with incompatible versions. - Added a new CI job to test the lowest declared versions of dependencies, ensuring compatibility with the minimum requirements specified in `pyproject.toml`. - Updated documentation in `contributing.md` to reflect the new CI testing process for lowest version checks.
- Changed the fido2 dependency version from `>=1.1.2,<3` to `>=2.0.0,<3` to ensure compatibility with the latest features and fixes.
- Added new dependencies for documentation: `furo`, `sphinx-copybutton`, and `sphinx-design` to enhance the documentation layout and usability. - Removed `sphinx-rtd-theme` in favor of `furo` for a more modern look. - Updated `README.md` to clarify integration recipes and troubleshooting sections. - Introduced a changelog file to document changes in future releases. - Enhanced `conf.py` to include new extensions and improve documentation build process.
- Implemented checks to prevent inactive users from signing in with passkeys, aligning behavior with Django's ModelBackend. - Updated the WebAuthnBackend to terminate existing sessions for deactivated accounts on their next request. - Improved error handling for TOTP secret verification when keys are missing, ensuring failed attempts are logged without raising server errors. - Refined enrollment logic to reject attempts to add duplicate authenticators gracefully, returning appropriate error responses instead of server errors. - Enhanced the user experience by ensuring that rejected passkey sign-ins provide clear feedback on the login page. - Updated documentation to reflect these changes and clarify the behavior of MFA features regarding inactive accounts.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.