Kyle Pope 53101d1401 Action deferred review items: TOTP lockout consolidation + toast nav ...

W-04: Replace inline lockout logic in totp.py (3 occurrences of
manual failed_login_count/locked_until manipulation) with shared
session service calls: check_account_lockout, record_failed_login,
record_successful_login. Also fix TOTP replay prevention to use
flush() not commit() for atomicity with session creation.

S-1: Add "Set up" action button to the post-login passkey prompt
toast, navigating to /settings?tab=security (already supported by
SettingsPage search params).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-17 23:02:59 +08:00

..

__init__.py

Initial commit

2026-02-15 16:13:41 +08:00

admin.py

Address code review findings across all phases

2026-03-13 00:19:33 +08:00

auth.py

Fix review findings: transaction atomicity, perf, and UI polish

2026-03-17 22:59:59 +08:00

calendars.py

Polish pass: action all remaining QA suggestions before merge

2026-03-17 05:28:34 +08:00

connections.py

Add collaborative project sharing, task assignments, and delta polling

2026-03-17 03:18:35 +08:00

dashboard.py

Remove unused get_accessible_calendar_ids import from dashboard

2026-03-16 20:43:35 +08:00

event_invitations.py

Add per-invitee can_modify toggle for event edit access

2026-03-17 00:59:36 +08:00

event_templates.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

events.py

Fix QA and pentest findings for event invitations

2026-03-17 01:28:01 +08:00

locations.py

Rework Nominatim results: name as label, address as full street address

2026-03-17 15:58:20 +08:00

notifications.py

Address QA warnings W-02 through W-07

2026-03-05 23:55:11 +08:00

passkeys.py

Fix review findings: transaction atomicity, perf, and UI polish

2026-03-17 22:59:59 +08:00

people.py

Fix QA: IntegrityError handling, dict mutation, birthday sync, None guard

2026-03-04 09:05:46 +08:00

projects.py

Polish pass: action all remaining QA suggestions before merge

2026-03-17 05:28:34 +08:00

reminders.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

settings.py

Action QA findings: refactor sync to accept resolved values

2026-03-07 06:13:21 +08:00

shared_calendars.py

Fix W-06 regression: preferred_name is on Settings, not User model

2026-03-06 23:49:49 +08:00

todos.py

M-01+M-03: Add input validation and extra=forbid to all request schemas

2026-02-27 15:43:55 +08:00

totp.py

Action deferred review items: TOTP lockout consolidation + toast nav

2026-03-17 23:02:59 +08:00

weather.py

Fix QA review #2: W-03/W-04, S-01 through S-04

2026-02-27 05:41:16 +08:00