kolaente d727c61f54 fix(user)!: give ErrCodeAccountLocked a unique error code ...

1026 was already taken by ErrorCodeUsernameReserved, which is older, so a
locked account was reported as a reserved username in clients.

BREAKING CHANGE: a locked account now returns 1040 instead of 1026.

2026-09-15 18:38:59 +02:00

..

bot_identity_test.go

refactor(bots): take a verified user, not any web.Auth

2026-08-29 23:29:46 +02:00

bot_identity.go

refactor(bots): take a verified user, not any web.Auth

2026-08-29 23:29:46 +02:00

caldav_token.go

…

db.go

…

delete.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

error_test.go

feat: always enable bot users

2026-05-04 10:38:53 +00:00

error.go

fix(user)!: give ErrCodeAccountLocked a unique error code

2026-09-15 18:38:59 +02:00

events.go

feat(events): add auth boundary events

2026-06-12 08:56:08 +00:00

is_admin_test.go

feat(user): extract last-admin guard and close invariant gaps

2026-04-20 18:55:06 +00:00

main_test.go

…

notifications.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

test.go

…

token_test.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

token.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

totp_test.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

totp.go

fix(auth): hide enabled totp secrets

2026-08-31 18:37:03 +02:00

update_email_test.go

feat(user): notify the current address when an email change is requested

2026-08-18 22:03:38 +02:00

update_email.go

feat(user): notify the current address when an email change is requested

2026-08-18 22:03:38 +02:00

user_claims_test.go

fix(security): reject non-user tokens in GetUserFromClaims

2026-08-04 13:40:11 +02:00

user_create_test.go

feat(invites): add admin-managed user invite links

2026-09-12 18:21:35 +02:00

user_create.go

feat(invites): add admin-managed user invite links

2026-09-12 18:21:35 +02:00

user_email_confirm_test.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

user_email_confirm.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

user_password_reset.go

…

user_test.go

test(db): cover the session memo

2026-09-08 20:28:52 +02:00

user.go

perf(db): memoize single-row task, project and user lookups per session

2026-09-08 20:28:52 +02:00

users_project.go

refactor(user): share user-search logic between v1 and v2

2026-06-11 20:07:43 +00:00

validator.go

…