Dustin Netherlands (formerly Unilogic B.V.)

PyOTP's totp.verify defaults to the valid_window of zero, which means it will reject valid codes, if submitted just past the 30 sec window. It also means, users will run into...

routes/index.py: otp_force shouldn't apply to OAuth

1

as 2FA policies are typically enforced on the OAuth proviers end Relates to #1051

Resolves the following issue, which occurs with force_otp enabled and OAuth authentication sources: File "/srv/powerdnsadmin/powerdnsadmin/models/user.py", line 481, in update_profile "utf-8") if self.plain_text_password else user.password AttributeError: 'User' object has no attribute...

admin_edit_key: default to User role for new api keys

1

hopefully this will prevent accidental administator api keys from being created