Eugen Rochko 8532429af7

Fix 2FA/sign-in token sessions being valid after password change (#14802) ...

If someone tries logging in to an account and is prompted for a 2FA
code or sign-in token, even if the account's password or e-mail is
updated in the meantime, the session will show the prompt and allow
the login process to complete with a valid 2FA code or sign-in token

2020-11-12 23:05:01 +01:00

..

v1

Add account sensitized (#14361)

2020-11-04 20:45:01 +01:00

v2

Change local media attachments to perform heavy processing asynchronously (#13210)

2020-03-08 23:56:18 +01:00

web

Fix not being able to enable status notifications in Web Push API (#14822)

2020-09-21 17:48:55 +02:00

base_controller.rb

Fix 2FA/sign-in token sessions being valid after password change (#14802)

2020-11-12 23:05:01 +01:00

oembed_controller.rb

Fix OEmbed leaking information about existence of non-public statuses (#12930)

2020-01-24 00:20:51 +01:00

proofs_controller.rb

Fix proofs API being inaccessible in secure mode (#12495)

2019-11-28 04:07:49 +01:00