* Overload mfa_login_post action introduced by auth_totp so that password
expiration check from password_security still happens during an MFA login
* Add unit tests for new logic
* Modify overloaded web_login action to not trigger a password expiration check
if the login process is not complete yet (e.g. due to auth_totp)
* Add unit test for new logic
* Fix warning caused by unrelated unit test
* Add logic to overloaded web_login action to log out users with expired
passwords, preventing the password reset from being ignored
* Add unit test for new logic
* Add support for rdepends_if_installed key, which allows a module to specify
other installed modules that should list it as a dependency
* Add unit tests for new logic
* Module auth_session_timeout:
---------------------------
* Refactor to allow other modules to inherit and augment or override the following:
** Session expiry time (deadline) calculation
** Ignored URLs
** Final session expiry (with possibility to late-abort)
* Re-ordered functionality to remove unnecessary work, as this code is called very often.
* Do not expire a session if delay gets set to zero (or unset / false)
* WIP
* Fixed flake8 lint errors
* Fixed flake8 lint errors
* WIP
* WIP
* WIP
* WIP
* WIP
* WIP
* Module: auth-session-timeout: Refactor ResUser tests to use `unittest.mock` patching
* Module: auth_session_timeout: Fixed flake8 lint errors
* Module: auth_session_timeout: Fixed flake8 lint errors
* Fix#908, a Firefox MFA login error, by adding logic that checks for the
Firefox edge case where redirect_with_hash returns a Response object rather
than a string
* Add test case for this scenario