kolaente 0f98c19ab6 fix: add TTL-based expiry and cleanup for used TOTP passcode entries ...

Store a unix timestamp instead of a boolean, and treat entries older
than 90 seconds as expired. A background goroutine lazily cleans up
expired keys after each successful validation to prevent unbounded
growth in the keyvalue store.

2026-03-23 10:34:49 +00:00

..

caldav

fix(caldav): parse timestamps in configured timezone

2026-03-03 12:18:48 +01:00

cmd

fix(cli): make user deletion confirmation check Windows compatible (#2339)

2026-03-05 15:19:08 +01:00

config

style: fix alignment in config key declarations

2026-03-20 11:08:00 +00:00

cron

…

db

fix: update TOTP reuse test to use user10 matching rebased fixture

2026-03-23 10:34:49 +00:00

doctor

refactor: remove typesense support

2026-02-25 12:15:28 +01:00

e2etests

test(webhooks): allow non-routable IPs in E2E tests

2026-03-19 15:18:06 +01:00

events

feat: add InitEventsForTesting and Unfake for real event dispatch in tests

2026-03-05 12:49:27 +01:00

files

refactor: replace afero with FileStorage interface

2026-03-20 10:59:44 +01:00

health

…

i18n

chore(i18n): update translations via Crowdin

2026-03-21 01:09:32 +00:00

initialize

refactor: remove typesense support

2026-02-25 12:15:28 +01:00

log

…

mail

…

metrics

…

migration

feat: add user_id to webhooks and user-directed event infrastructure

2026-03-08 19:45:53 +01:00

models

test: register totp fixture in test setup

2026-03-20 12:22:27 +00:00

modules

refactor: rename checkProjectBackgroundWriteRights to checkProjectBackgroundWritePermissions

2026-03-20 11:41:28 +00:00

notifications

test: add tests for conversational email system

2026-03-08 16:03:47 +01:00

plugins

…

red

…

routes

fix: reject CalDAV basic auth when TOTP is enabled

2026-03-20 12:22:27 +00:00

swagger

[skip ci] Updated swagger docs

2026-03-19 09:26:05 +00:00

user

fix: add TTL-based expiry and cleanup for used TOTP passcode entries

2026-03-23 10:34:49 +00:00

utils

refactor(utils): extract ContainsPathTraversal to shared utils package

2026-02-25 13:01:00 +01:00

version

…

web

feat(handlers): dispatch pending events after transaction commit

2026-03-03 12:46:34 +01:00

webtests

test: verify CalDAV token auth bypasses TOTP check

2026-03-20 12:22:27 +00:00