kolaente dc6365f0f4 fix(user): expire used TOTP passcodes via keyvalue TTL ...

Replaces the hand-rolled timestamp check and cleanup goroutine. The old
int64 type assertion never matched on redis (Get returns a string), so
passcode replay protection was silently disabled there.

2026-08-19 17:29:35 +02:00

..

caldav_token.go

…

db.go

…

delete.go

…

error_test.go

…

error.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

events.go

…

is_admin_test.go

…

main_test.go

…

notifications.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

test.go

…

token_test.go

…

token.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

totp_test.go

…

totp.go

fix(user): expire used TOTP passcodes via keyvalue TTL

2026-08-19 17:29:35 +02:00

update_email_test.go

feat(user): notify the current address when an email change is requested

2026-08-18 22:03:38 +02:00

update_email.go

feat(user): notify the current address when an email change is requested

2026-08-18 22:03:38 +02:00

user_claims_test.go

…

user_create.go

fix(user): keep email confirmation status after registration

2026-08-18 11:30:03 +02:00

user_email_confirm_test.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

user_email_confirm.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

user_password_reset.go

…

user_test.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

user.go

feat(user): add pending_email column

2026-08-18 22:03:38 +02:00

users_project.go

…

validator.go

…