mirror of
git://git.yoctoproject.org/layerindex-web.git
synced 2025-07-05 13:14:46 +02:00

Add user security questions upon registration as extra authentication for password reset. Three unique security questions must be chosen and answered. Answers are then stored in the database with the same hashing algorithm as the users's password. On password reset, users get two chances to get two out of three security questions answered correctly. After a second failure their account is locked and email is sent to the admin. The same template is shown for the axes lockout. Super user cannot reset their password until they set security questions. Users can update their security questions or add them if they weren't originally set (in the case of super user) in Edit Profile. Signed-off-by: Amber Elliot <amber.n.elliot@intel.com>
7 lines
340 B
Python
7 lines
340 B
Python
security_questions = ["What was the name of your first pet?",
|
|
"What was the last name of your third grade teacher?",
|
|
"What is your favorite pizza topping?",
|
|
"What is your favorite band?",
|
|
"What street did you grow up on?",
|
|
]
|