ulysses/core
Afonso Coutinho 926a4c59cb
fix: 2FA bypassed when enabled but TOTP secret is missing (fail-open) (#1286)
* fix: fail closed when 2FA is enabled but the TOTP secret is missing

* test: totp_verify fails closed when secret missing, passes when 2FA off
2026-06-03 01:26:47 +09:00
..
__init__.py Odysseus v1.0 2026-05-31 23:58:26 +09:00
atomic_io.py Add native Windows compatibility layer 2026-06-01 15:09:47 +09:00
auth.py fix: 2FA bypassed when enabled but TOTP secret is missing (fail-open) (#1286) 2026-06-03 01:26:47 +09:00
constants.py Odysseus v1.0 2026-05-31 23:58:26 +09:00
database.py DB: enable SQLite foreign key cascades 2026-06-02 20:36:13 +09:00
exceptions.py Odysseus v1.0 2026-05-31 23:58:26 +09:00
middleware.py Fix email-thread HTML injection, attachment path traversal, and missing authz (#475) 2026-06-01 22:20:17 +09:00
models.py Odysseus v1.0 2026-05-31 23:58:26 +09:00
platform_compat.py Windows: improve Git Bash detection 2026-06-02 20:45:48 +09:00
session_manager.py fix: persist and display multimodal messages (image/audio attachments) (#1159) 2026-06-02 22:37:48 +09:00