Dane Everitt 288ee1a258 Improved TOTp handling in login. ... Cleaned up the code a bit, also checks TOTP before attemping to verify user. This addresses the potential for an attacker to try at a password and/or confirm that the password is correct unless they have a valid TOTP code for the request. A failed TOTP response will trigger a throttle count on the login as well.		2015-12-10 21:58:17 -05:00
..
AuthController.php	Improved TOTp handling in login.	2015-12-10 21:58:17 -05:00
PasswordController.php	Migrate ability to reset passwords	2015-12-08 18:28:49 -06:00