17 Commits

Author	SHA1	Message	Date
Jamie Cameron	9bd96b6448	Rate limit before checking if the user exists	2025-04-26 14:44:37 -07:00
Jamie Cameron	7ff37cd12f	Add a delay based on the number of tries	2025-04-26 14:42:18 -07:00
Ilia Ross	55fd013b35	Fix to remove pointless new line that looks bad	2025-04-26 21:40:00 +03:00
Jamie Cameron	4fbc57350f	Add logging for password resets	2025-04-26 10:04:43 -07:00
Ilia Ross	cc83641c11	Add ability for themes to handle each "forgot_*" page	2025-04-25 20:01:30 +03:00
Ilia Ross	971c526ade	Fix to lower the static delay for now	2025-04-25 11:39:27 +03:00
Ilia Ross	e55f3bdb74	Add ability for the theme to construct own forgot link	2025-04-25 00:49:39 +03:00
Ilia Ross	25d2edeeaf	Add a cooldown period for password reset request rates	2025-04-24 21:06:43 +03:00
Jamie Cameron	e0b6ae7691	Obsfucate email for display	2025-04-21 22:04:03 -07:00
Jamie Cameron	4c60aa1865	Include username is email subject	2025-04-20 11:15:17 -07:00
Jamie Cameron	590a3218be	Cleanup old forgotten password reset key	2025-04-20 11:14:05 -07:00
Jamie Cameron	cf50dd2431	Start of work on password reset rate limiting	2025-04-20 10:54:39 -07:00
Jamie Cameron	a04646e785	Cannot reset password if you're logged in	2025-04-20 10:30:14 -07:00
Jamie Cameron	2916f5b723	Define the forgot password dir in init_config	2025-04-20 10:00:47 -07:00
Jamie Cameron	a664809bf4	Implement forgotted password reset for Virtualmin users	2025-04-17 22:11:39 -07:00
Jamie Cameron	ea973b571b	Fix password change for regular webmin users	2025-04-15 21:23:10 -07:00
Jamie Cameron	d9dbcd9746	More work on forgotten password support	2025-04-14 22:44:55 -07:00