bors[bot] 25e8910b89 Merge #1783 ... 1783: Switch to server-side sessions r=mergify[bot] a=nextgens ## What type of PR? bug-fix ## What does this PR do? It simplifies session management. - it ensures that sessions will eventually expire (*) - it implements some mitigation against session-fixation attacks - it switches from client-side to server-side sessions (in Redis) It doesn't prevent us from (re)-implementing a "remember_me" type of feature if that's considered useful by some. Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>		2021-03-10 09:44:31 +00:00
..
internal	Merge branch 'master' into enforce-tls-admin	2021-03-09 23:40:51 +01:00
translations	Translated using Weblate (Basque)	2021-03-04 18:46:27 +00:00
ui	Disable anti-csrf on the login form	2021-03-09 14:21:02 +01:00
__init__.py	cleanup old sessions on startup	2021-03-09 14:21:02 +01:00
configuration.py	Merge #1783	2021-03-10 09:44:31 +00:00
debug.py	Clean most of the refactored code	2018-10-18 17:55:07 +02:00
dkim.py	Upgrading to a 2048-bit DKIM key	2020-01-16 16:47:27 +01:00
limiter.py	Refactor the rate limiting code	2020-02-09 17:38:18 +01:00
manage.py	Misc improvements to PASSWORD_SCHEME	2021-03-09 12:04:42 +01:00
models.py	CryptContext should be a singleton	2021-03-09 12:05:46 +01:00
utils.py	Explicitly define ProxyFix options	2020-06-28 17:27:45 -04:00