4 Commits

Author	SHA1	Message	Date
Nicholas Staples	7001d8261d	Fix for security hole with setting session['user_id'] before second factor of authentication has been authorised.	2016-01-07 12:43:10 +00:00
Rebecca Law	64812c1614	109898688: All codes are valid until one code is used, then they are all marked used. ... Fixed the is_active() method on the Users model, if the user was pending they would come back as active, allowing a user to sign in before being active. There is still a problem with the validate_sms_code and validate_email_code method.	2015-12-17 14:33:20 +00:00
Rebecca Law	caabda92e0	Test for VerifyForm and TwoFactorForm	2015-12-14 14:09:29 +00:00
Rebecca Law	295dbeb7d1	Create unit tests that test the forms.	2015-12-14 13:25:27 +00:00