kolaenteandkolaente 5b7924b1f6 fix(auth): return ErrAccountLocked for locked accounts on login ...

The login status check mapped a locked account to ErrAccountDisabled,
surfacing the disabled-account error code and message even though a
dedicated ErrAccountLocked exists (and the OIDC flow already uses it). Map
the locked status to ErrAccountLocked so credential login is consistent with
OIDC across both /api/v1 and /api/v2. Disabled accounts still return
ErrAccountDisabled.

This changes the v1 login error code for locked accounts on the wire (1020 ->
1026); the change is intentional and approved.

2026-06-17 19:43:41 +00:00

..

audit

refactor(events): use a concrete doer on project and team events

2026-06-12 08:56:08 +00:00

caldav

…

caldavtests

…

cmd

fix(cli): guard last admin on scheduled CLI deletion path

2026-04-20 18:55:06 +00:00

config

feat(config): add audit logging config keys

2026-06-12 08:56:08 +00:00

cron

…

db

fix(db): interpolate table identifiers in truncate instead of binding them

2026-06-17 12:13:50 +00:00

doctor

…

e2etests

…

events

refactor(events): pass context to DispatchPending directly

2026-06-12 08:56:08 +00:00

files

docs(api/v2): tag task attachment fields for the v2 schema

2026-06-10 10:22:39 +00:00

health

…

i18n

chore(i18n): update translations via Crowdin

2026-05-27 02:31:52 +00:00

initialize

feat(audit): wire request-meta middleware and writer initialization

2026-06-12 08:56:08 +00:00

license

fix(license): degrade to free when servers unreachable or key rejected

2026-04-20 18:55:06 +00:00

log

…

mail

feat: add Atom feed for user notifications with API token auth (#2758)

2026-05-15 17:25:09 +02:00

metrics

refactor(metrics): count entities on demand with a TTL cache

2026-05-30 13:48:01 +00:00

migration

feat(time-tracking): add the time_entries table migration

2026-06-08 13:54:09 +00:00

models

fix(export): treat a missing export meta row as no export in the status

2026-06-17 18:39:38 +00:00

modules

refactor(auth): extract transport-agnostic login, logout and OIDC cores

2026-06-17 19:43:41 +00:00

notifications

fix(notifications): strip remote images from notification emails

2026-06-11 06:53:37 +00:00

plugins

…

red

…

routes

fix(auth): return ErrAccountLocked for locked accounts on login

2026-06-17 19:43:41 +00:00

swagger

[skip ci] Updated swagger docs

2026-06-17 19:43:01 +00:00

user

feat(api/v2): add totp qr code endpoint

2026-06-17 18:39:38 +00:00

utils

…

version

…

web

fix(files): never cache file downloads in v1 or v2

2026-06-17 18:39:38 +00:00

websocket

feat(time-tracking): let clients subscribe to timer events

2026-06-08 13:54:09 +00:00

webtests

fix(auth): return ErrAccountLocked for locked accounts on login

2026-06-17 19:43:41 +00:00

yaegi_symbols

refactor(user): remove the now-empty listeners file

2026-05-30 13:48:01 +00:00