Jeff Turner

On this topic, I'd love to experiment with completely outsourcing authentication, e.g. to [KeyCloak](https://www.keycloak.org/) (or [Ory, Authelia etc](https://news.ycombinator.com/item?id=25763320)). This could be done at the webserver layer, e.g. Apache running [mod_auth_oidc](https://github.com/thomasdarimont/keycloak_mod_auth_oidc_example)....

See [this section in Keycloak docs](https://www.keycloak.org/docs/12.0/server_admin/#otp-policies) on 2FA. Keycloak is self-hosted. A quick way to add a layer of protection is to put Jethro behind [Cloudflare Zero Trust](https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/self-hosted-apps/) proxy. This...

> I have also been thinking it would be good to have 2FA. At the risk of showing my ignorance - is an email code as safe as sms? Are...

The PR improves this a bit by at least keeping each row together: 

@tbar0970 no, the photo cell is only in the first row. This is probably a separate bug:  

> Would a solution to that be to have some parameters to the process that can specify things like column widths, borders and padding? That probably is the only fix....

Yes, perhaps adding a 'Member-only Accounts' section to the current User Accounts admin page would be better.

FYI, Mariadb 10.6 does that query on that database in 0.069s. The query plan is different: ``` +------+--------------------+-------+--------+-----------------------------------------------+---------+---------+----------------------+------+----------------------------------------------+ | 1 | PRIMARY | g | index | NULL | PRIMARY...

@ibrarahmad, @jmealo, using latest from git, instead of slow queries I now get outright breakage after the fifth query: ```` postgres@jturner-desktop:~$ psql -tAq testdb < slowloop.sql NOTICE: Found user Bob...

Hi, You might like to compare `person_photo` table contents before and after, to see if the bytes were corrupted: ```sql select personid, md5(photodata) from person_photo order by personid; ``` Also,...