Claire 94bcf45321 Fix authentication failures after going halfway through a sign-in attempt (#16607) ... * Add tests * Add security-related tests My first (unpublished) attempt at fixing the issues introduced (extremely hard-to-exploit) security vulnerabilities, addressing them in a test. * Fix authentication failures after going halfway through a sign-in attempt * Refactor `authenticate_with_sign_in_token` and `authenticate_with_two_factor` to make the two authentication steps more obvious		2021-08-25 22:52:41 +02:00
..
account_controller_concern.rb	Add ActivityPub secure mode (#11269)	2019-07-11 20:11:09 +02:00
account_owned_concern.rb	Add support for reversible suspensions through ActivityPub (#14989)	2020-11-08 00:28:39 +01:00
accountable_concern.rb	…
authorization.rb	…
cache_concern.rb	Fix cache_collection crashing when given an empty collection (#15921)	2021-03-18 00:41:32 +01:00
challengable_concern.rb	Bump rubocop from 0.86.0 to 0.88.0 (#14412)	2020-09-01 03:04:00 +02:00
export_controller_concern.rb	Refactor settings controllers (#14767)	2020-09-11 20:56:35 +02:00
localized.rb	Fix not working I18n on 2FA and Sign in token page (#14087)	2020-06-20 13:30:13 +02:00
rate_limit_headers.rb	Add specific rate limits for posting and following (#13172)	2020-03-08 15:17:39 +01:00
registration_spam_concern.rb	Add honeypot fields and minimum fill-out time for sign-up form (#15276)	2020-12-10 06:27:26 +01:00
session_tracking_concern.rb	…
sign_in_token_authentication_concern.rb	Fix authentication failures after going halfway through a sign-in attempt (#16607)	2021-08-25 22:52:41 +02:00
signature_authentication.rb	…
signature_verification.rb	Fix crash on receiving requests with missing Digest header (#15782)	2021-02-26 17:40:27 +01:00
status_controller_concern.rb	Refactor controllers for statuses, accounts, and more (#11249)	2019-07-08 12:03:45 +02:00
two_factor_authentication_concern.rb	Fix authentication failures after going halfway through a sign-in attempt (#16607)	2021-08-25 22:52:41 +02:00
user_tracking_concern.rb	Fix 2FA/sign-in token sessions being valid after password change (#14802)	2020-11-12 23:05:01 +01:00