Django-mfa2

Latest version: v2.8.0

Safety actively analyzes 622368 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 4

2.8.0

* Support For Django 4.0+ JSONField
* Removed jsonfield package from requirements

2.7.0

* Fixed 70
* Add QR Code for trusted device link
* Better formatting for trusted device start page.

2.6.1

* Fix: CVE-2022-42731: related to the possibility of registration replay attack.
Thanks to 'SSE (Secure Systems Engineering)'

2.6.0

Not secure
* Adding Backup Recovery Codes (Recovery) as a method.
Thanks to Spitfireap for work, and peterthomassen for guidance.
* Added: `RECOVERY_ITERATION` to set the number of iteration when hashing recovery token
* Added: `MFA_ENFORCE_RECOVERY_METHOD` to enforce the user to enroll in the recovery code method once, they add any other method,
* Added: `MFA_ALWAYS_GO_TO_LAST_METHOD` to the settings which redirects the user automatically to the last used method when logging in
* Added: `MFA_RENAME_METHODS` to be able to rename the methods for the user.
* Fix: Alot of CSS fixes for the example application

2.5.1

* Fix: CVE-2022-42731: related to the possibility of registration replay attack.
Thanks to 'SSE (Secure Systems Engineering)'

2.5.0

Not secure
* Fixed: issue in the 'Authorize' button don't show on Firefox and Chrome on iOS.
Note: It seems Firefox doesn't support WebAuthn on iOS
* Fixed: Support for bootstrap5
Thanks to ezrajrice
* Upgraded to fido2==1.0.0

Page 1 of 4

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.