forked from ungleich-public/ungleich-user
Restore root requirements.txt pinned to what production runs (Django 2.2, last patch 2.2.28) so the upgrade starts from a reproducible baseline. Restore logs/.keep; the logging config fails on a fresh clone without the directory. The tests drive every view over HTTP against the real test LDAP: login, registration and activation, data and password changes, password reset, account deletion, the create API and OTP seeds. Known bugs are recorded as expected failures: - password reset POST changes any user's password without a token - LDAP filter injection in reset (user='*' hits the first entry) - activation link carries the base64-encoded password - a username from ou=users can be registered again under ou=customers |
||
|---|---|---|
| .. | ||
| .keep | ||