Hopiu/django-axes
1
0
Fork 0
mirror of https://github.com/jazzband/django-axes.git synced 2026-05-17 20:11:08 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
1384 commits 9 branches 163 tags 4.7 MiB
Commit graph

1384 commits

This branch
This branch
All branches
Author SHA1 Message Date
Aleksi Häkli
67189a48c9 Fix Python QA version 
3.10 is used for QA runs in tox configuration
 2022-05-16 10:41:07 +03:00
Aleksi Häkli
4490013111 Migrate MD5 hashing to SHA256 
Continue using MD5 hashing in Axes test settings
as it offers better performance for test runs
without compromising security for users
 2022-05-16 10:41:07 +03:00
naveen
68a4827870 chore: Enable codeql action 
This action runs GitHub's industry-leading semantic code analysis engine,
CodeQL, against a repository's source code to find security vulnerabilities.

https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql

https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 2022-05-15 14:49:14 +03:00
dependabot[bot]
b7a93b4234 Bump coverage from 6.3.2 to 6.3.3 
Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.3.2 to 6.3.3.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/6.3.2...6.3.3)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-05-13 19:45:38 +02:00
Hasan Ramezani
2784b79475 Replace old-style PyPy config key. 2022-05-13 20:43:14 +03:00
Shaheed Haque
99e10cb714 Update expected test results. 2022-05-11 17:08:55 +03:00
Shaheed Haque
012fde1caf Refine and streamline startup log. The new output is on one line and 
looks like this:

AXES: BEGIN version 5.32.1.dev14+g038dc7c.d20220507, blocking by IP only

Resolves #884.
 2022-05-11 17:08:55 +03:00
naveensrinivasan
038dc7cd97 Set permissions for GitHub actions 
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
 2022-05-02 19:24:17 +03:00
dependabot[bot]
6ccff1ff34 Bump actions/setup-python from 2 to 3 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-05-02 19:02:19 +03:00
dependabot[bot]
7bedbaf1aa Bump codecov/codecov-action from 1 to 3 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 1 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v1...v3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-05-02 19:02:14 +03:00
dependabot[bot]
214b1969c6 Bump actions/checkout from 2 to 3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-05-02 19:02:04 +03:00
dependabot[bot]
c5af43bd1d Bump actions/cache from 2 to 3 
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-05-02 19:01:48 +03:00
neil
1dfcb233b4 chore: Included githubactions in the dependabot config 
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: neil <42328488+neilnaveen@users.noreply.github.com>
 2022-05-02 18:22:43 +03:00
Hasan Ramezani
382468cef4 Add type hint for request variables 2022-05-02 18:21:03 +03:00
dependabot[bot]
f6355028f5 Bump mypy from 0.942 to 0.950 
Bumps [mypy](https://github.com/python/mypy) from 0.942 to 0.950.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v0.942...v0.950)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-29 09:05:23 +02:00
dependabot[bot]
a0cdd9ca42 Bump pytest from 7.1.1 to 7.1.2 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.1.1 to 7.1.2.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.1.1...7.1.2)

---
updated-dependencies:
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-25 14:23:46 +02:00
Tato Moaki
ada98869d8 Fix typo in documentation 2022-04-20 11:43:52 +02:00
Hasan Ramezani
dc98a7b2e3 Allow float values for AXES_COOLOFF_TIME(#868). 2022-04-13 17:51:10 +03:00
Hasan Ramezani
4da7eb9fc1 Add Optional to type of params with default value equal to None 2022-04-13 17:48:32 +03:00
Hasan Ramezani
bd82bf8e35 Change tox QA env Python version to 3.8 2022-04-13 17:48:32 +03:00
dependabot[bot]
eeafc569e9 Bump tox from 3.24.5 to 3.25.0 
Bumps [tox](https://github.com/tox-dev/tox) from 3.24.5 to 3.25.0.
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/master/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/tox/compare/3.24.5...3.25.0)

---
updated-dependencies:
- dependency-name: tox
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-11 14:55:06 +02:00
Aleksi Häkli
813a8518bc
Version 5.32.0 2022-04-08 22:21:17 +03:00
Antoine Dujardin
9c2ceb7eb7 Add option to keep current behavior for cooloff reset 2022-04-08 22:17:05 +03:00
Antoine Dujardin
1015bad451 Don't reset cooloff time in case of login attempt during lockout 2022-04-08 22:17:05 +03:00
Gregory DAVID
246d884b84 Tests for AccessFailureLog 2022-04-08 22:16:19 +03:00
Gregory DAVID
1849552f45 Implement AccessFailureLog recordings 2022-04-08 22:16:19 +03:00
Gregory DAVID
da7a9b25ed Add AccessFailureLogclass to models to keep trace of all failed logins 2022-04-08 22:16:19 +03:00
dependabot[bot]
110fe905eb Bump black from 22.1.0 to 22.3.0 
Bumps [black](https://github.com/psf/black) from 22.1.0 to 22.3.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/22.1.0...22.3.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-04 09:07:39 +02:00
dependabot[bot]
81f8c91858 Bump pytest from 7.1.0 to 7.1.1 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.1.0 to 7.1.1.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.1.0...7.1.1)

---
updated-dependencies:
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-04 09:07:08 +02:00
dependabot[bot]
bedf8a7efa Bump mypy from 0.941 to 0.942 
Bumps [mypy](https://github.com/python/mypy) from 0.941 to 0.942.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v0.941...v0.942)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-25 16:50:42 +04:30
dependabot[bot]
6df6f60ff8 Bump mypy from 0.940 to 0.941 
Bumps [mypy](https://github.com/python/mypy) from 0.940 to 0.941.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v0.940...v0.941)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-15 15:49:02 +03:30
dependabot[bot]
32c825d98a Bump pytest from 7.0.1 to 7.1.0 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.0.1 to 7.1.0.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.0.1...7.1.0)

---
updated-dependencies:
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-14 16:00:28 +03:30
dependabot[bot]
5b011fd662 Bump mypy from 0.931 to 0.940 
Bumps [mypy](https://github.com/python/mypy) from 0.931 to 0.940.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v0.931...v0.940)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-14 16:00:11 +03:30
dependabot[bot]
65aafe0207 Bump prospector from 1.7.6 to 1.7.7 
Bumps [prospector](https://github.com/PyCQA/prospector) from 1.7.6 to 1.7.7.
- [Release notes](https://github.com/PyCQA/prospector/releases)
- [Changelog](https://github.com/PyCQA/prospector/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/PyCQA/prospector/compare/1.7.6...1.7.7)

---
updated-dependencies:
- dependency-name: prospector
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-10 15:57:26 +03:30
dependabot[bot]
4f1a92b1df Bump prospector from 1.7.5 to 1.7.6 
Bumps [prospector](https://github.com/PyCQA/prospector) from 1.7.5 to 1.7.6.
- [Release notes](https://github.com/PyCQA/prospector/releases)
- [Changelog](https://github.com/PyCQA/prospector/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/PyCQA/prospector/compare/1.7.5...1.7.6)

---
updated-dependencies:
- dependency-name: prospector
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-04 23:24:29 +02:00
Hasan Ramezani
60e4b5c6fc Pin pypy-3.8 version to fix SQLite error in CI. 2022-03-04 23:24:12 +02:00
Hasan Ramezani
e4e88e01a3 Fix #845 -- Rename test functions 2022-03-02 17:12:45 +02:00
dependabot[bot]
adc26bf13a Bump prospector from 1.7.4 to 1.7.5 
Bumps [prospector](https://github.com/PyCQA/prospector) from 1.7.4 to 1.7.5.
- [Release notes](https://github.com/PyCQA/prospector/releases)
- [Changelog](https://github.com/PyCQA/prospector/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/PyCQA/prospector/compare/1.7.4...1.7.5)

---
updated-dependencies:
- dependency-name: prospector
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-01 15:48:42 +03:30
dependabot[bot]
9ffa8aa9ba Bump prospector from 1.7.0 to 1.7.4 
Bumps [prospector](https://github.com/PyCQA/prospector) from 1.7.0 to 1.7.4.
- [Release notes](https://github.com/PyCQA/prospector/releases)
- [Changelog](https://github.com/PyCQA/prospector/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/PyCQA/prospector/compare/1.7.0...1.7.4)

---
updated-dependencies:
- dependency-name: prospector
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-28 15:54:46 +03:30
dependabot[bot]
1f95f2278f Bump prospector from 1.6.0 to 1.7.0 
Bumps [prospector](https://github.com/PyCQA/prospector) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/PyCQA/prospector/releases)
- [Changelog](https://github.com/PyCQA/prospector/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/PyCQA/prospector/compare/1.6.0...1.7.0)

---
updated-dependencies:
- dependency-name: prospector
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-28 11:22:40 +03:30
hashlash
8ed798c155 Use 4 space indentation in config docs 2022-02-28 11:22:24 +03:30
dependabot[bot]
769103a090 Bump coverage from 6.3.1 to 6.3.2 
Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.3.1 to 6.3.2.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/6.3.1...6.3.2)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-21 15:54:05 +03:30
Hasan Ramezani
9d39184179 Exclude running test for Python3.7 and Django main. 2022-02-17 15:23:55 +02:00
dependabot[bot]
24f073e188 Bump pytest-subtests from 0.6.0 to 0.7.0 
Bumps [pytest-subtests](https://github.com/pytest-dev/pytest-subtests) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/pytest-dev/pytest-subtests/releases)
- [Changelog](https://github.com/pytest-dev/pytest-subtests/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-subtests/compare/0.6.0...0.7.0)

---
updated-dependencies:
- dependency-name: pytest-subtests
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-17 15:23:20 +02:00
dependabot[bot]
ca4d326fa4 Bump pytest from 7.0.0 to 7.0.1 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.0.0...7.0.1)

---
updated-dependencies:
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-17 15:22:31 +02:00
dependabot[bot]
374e9d05a8 Bump pytest from 6.2.5 to 7.0.0 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 6.2.5 to 7.0.0.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/6.2.5...7.0.0)

---
updated-dependencies:
- dependency-name: pytest
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-04 13:23:35 +01:00
dependabot[bot]
97ce5f9eb2 Bump coverage from 6.3 to 6.3.1 
Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.3 to 6.3.1.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/6.3...6.3.1)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-02-02 13:28:37 +01:00
dependabot[bot]
fed6302dde Bump black from 21.12b0 to 22.1.0 
Bumps [black](https://github.com/psf/black) from 21.12b0 to 22.1.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/commits/22.1.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-01-31 13:22:40 +01:00
dependabot[bot]
e48e5aefd1 Bump coverage from 6.2 to 6.3 
Bumps [coverage](https://github.com/nedbat/coveragepy) from 6.2 to 6.3.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/6.2...6.3)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-01-26 20:47:05 +02:00
Hasan Ramezani
b60fecc373 Remove remaining items from Django 2.2 2022-01-19 10:58:54 +02:00