2026.7.0 - #668

Merged

MarcelGeo merged 35 commits into

Aug 27, 2026

Commits on Jun 17, 2026

Fixed session cookie gap for deactivated users
varmar05
committed
c0d57d2
Add configurable bcrypt cost factor
varmar05
committed
26a0698
Add temporary account lockout
varmar05
committed
ce00ed3

Commits on Jun 19, 2026

Fix tests
varmar05
committed
3373220
Add missing import
varmar05
committed
f2708ce

Commits on Jun 22, 2026

Support for whitelisting extensions/mimetype
harminius
committed
022e1a9
rm debugging residue
harminius
committed
c001c7a

Commits on Jul 1, 2026

Remove locked_until from response and other minor fixes
varmar05
committed
956e01b
Merge pull request #640 from MerginMaps/auth_fixes
MarcelGeo
authored
8efd371

Commits on Jul 2, 2026

address @MarcelGeo comments - use check_skip_validation -> also skips mimetype check -> mime_type config var is not needed
harminius
committed
64a3844

Commits on Jul 3, 2026

Merge pull request #643 from MerginMaps/whitelisting_extensions_mimetypes
MarcelGeo
authored
4ddde36

Commits on Jul 22, 2026

Display whitespaces in delete dialogs
harminius
committed
f83a49d
Merge pull request #653 from MerginMaps/dialog_display_whitespaces
MarcelGeo
authored
f0ca92f

Commits on Jul 23, 2026

Merge branch 'master' into backport_master
varmar05
committed
c57d2e7
Merge pull request #654 from MerginMaps/backport_master
MarcelGeo
authored
4419742

Commits on Jul 24, 2026

Send email notification with self-service unlock link on account lockout

varmar05
and
claude
committed
de772e5

Commits on Jul 27, 2026

fix account lockout component
varmar05
committed
56626f6
address review comments
varmar05
committed
5f7aefe

Commits on Jul 28, 2026

Merge pull request #656 from MerginMaps/account_locked_emails
varmar05
authored
ce69919

Commits on Aug 4, 2026

Count lockout failures over a rolling window via LoginHistory

varmar05
and
claude
committed
243d4f9

Commits on Aug 6, 2026

Fix axios error handling in user store
varmar05
committed
2c68b50

Commits on Aug 12, 2026

Merge pull request #657 from MerginMaps/locked_account_fixes
MarcelGeo
authored
0f07ecb

Commits on Aug 17, 2026

Remove special response for locked account error
varmar05
committed
579896d
Make response uniform regardless of account existence

varmar05
and
claude
committed
48a57df

Commits on Aug 18, 2026

Ensure the same timing for all auth routes

varmar05
and
claude
committed
cab687f
Added outlined severty handling in css
MarcelGeo
committed
7ea1865
Merge pull request #663 from MerginMaps/fix_auth_responses
MarcelGeo
authored
c374a52

Commits on Aug 19, 2026

Merge pull request #664 from MerginMaps/confirm-dialog-cancel-buttons
MarcelGeo
authored
d380168

Commits on Aug 24, 2026

Fix locked account page in case of invalid link
varmar05
committed
57d37b2
Successful login cleans failed attempts history for the lockout window

varmar05
and
claude
committed
f526f28

Commits on Aug 25, 2026

Trigger lockout only on tier's border
varmar05
committed
8aebc22
Tweak unlock account page
varmar05
committed
72c59e9
Merge pull request #665 from MerginMaps/fix_locked_account_issues
MarcelGeo
authored
c07ee6d

Commits on Aug 27, 2026

added data-cy for tests compatibility
MarcelGeo
committed
7cbf024
Merge pull request #667 from MerginMaps/styles-tunning
MarcelGeo
authored
215b96f