django-allauth 65.3.0 released
Posted by Raymond Penners on 2024-11-30
Note worthy changes
- Added support for TOTP code tolerance (see MFA_TOTP_TOLERANCE).
Security notice
- Authentication by email/password was vulnerable to account enumeration by means of a timing attack. Thanks to Julie Rymer for the report and the patch.
Previous: django-allauth 65.2.0 released