Joshua Tauberer그리고NewbieOrange e884c4774f Replace HMAC-based session API keys with tokens stored in memory in the daemon process ...

Since the session cache clears keys after a period of time, this fixes #1821.

Based on https://github.com/mail-in-a-box/mailinabox/pull/2012, and so:

Co-Authored-By: NewbieOrange <NewbieOrange@users.noreply.github.com>

Also fixes #2029 by not revealing through the login failure error message whether a user exists or not.

2021-09-06 09:23:58 -04:00

..

fail2ban.py

Replace HMAC-based session API keys with tokens stored in memory in the daemon process

2021-09-06 09:23:58 -04:00

pip-requirements.txt

in the DNS test, use dnspython3 rather than dig

2014-04-23 18:27:50 -04:00

test_dns.py

update test_dns

2014-06-21 12:32:20 -04:00

test_mail.py

Enable and recommend port 465 for mail submission instead of port 587 (fixes #1849)

2021-05-15 16:42:14 -04:00

test_smtp_server.py

fix shebang lines in the tests to take advantage of any activated python environment

2014-06-08 17:31:12 -04:00

tls_results.txt

update list of tls ciphers supported

2019-01-09 08:52:51 -05:00

tls.py

update list of tls ciphers supported

2019-01-09 08:52:51 -05:00