Florian Ritterhoff

FR: Add the ability to limit concurrency (similar to a "max threads" limit)

1

# Background As discussed in #3294 we are stumbeling into some strange issues with to low rate limits. While we can mitigate these in our case by increasing the limits...

fix: handle token reset for passkey auth

1

A sucessfull authentication does not reset the other failcounters for the tokens. This PR fixes the behaviour.

feat: use passlib instead of crypt(_r)

10

The crypt package has been removed with Python 3.13. As a replacement, we used crypt_r, which is a drop-in replacement by just being a copy of the removed package. As...

feat: start making webauthn storage unciphered

1

Currently the `credential_id` of a FIDO2/Passkey is stored encrypted - that takes time and to be honest is not required. This is a first attempt to rework this part. Currently...

The fix introduced with #1003 always sets a `NoBody` (even for a HTTP Method `DELETE` without any params) In further consecuence this sets a `application/json` as `Content-Type` in the next...