Afonso Coutinho 926a4c59cb fix: 2FA bypassed when enabled but TOTP secret is missing (fail-open) (#1286) ...

* fix: fail closed when 2FA is enabled but the TOTP secret is missing

* test: totp_verify fails closed when secret missing, passes when 2FA off

2026-06-03 01:26:47 +09:00

..

__init__.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

atomic_io.py

Add native Windows compatibility layer

2026-06-01 15:09:47 +09:00

auth.py

fix: 2FA bypassed when enabled but TOTP secret is missing (fail-open) (#1286)

2026-06-03 01:26:47 +09:00

constants.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

database.py

DB: enable SQLite foreign key cascades

2026-06-02 20:36:13 +09:00

exceptions.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

middleware.py

Fix email-thread HTML injection, attachment path traversal, and missing authz (#475)

2026-06-01 22:20:17 +09:00

models.py

Odysseus v1.0

2026-05-31 23:58:26 +09:00

platform_compat.py

Windows: improve Git Bash detection

2026-06-02 20:45:48 +09:00

session_manager.py

fix: persist and display multimodal messages (image/audio attachments) (#1159)

2026-06-02 22:37:48 +09:00