forked from NYANDEV/forgejo
7e12aac61c
* Don't allow for plain username/password authentication when 2FA is enabled * Removed debugging statement * Don't assume a token belongs to a given user, handle two-factor errors properly * Simplified user/token matching, refactored error handling for two-factor authentication * Change authentication response to avoid bruteforcing * Add TODO item as a comment for changing the response for security purposes |
||
---|---|---|
.. | ||
admin | ||
api/v1 | ||
dev | ||
org | ||
private | ||
repo | ||
routes | ||
user | ||
home.go | ||
init.go | ||
install.go |