kolaente 8f9b9aba68 feat(migration): index the columns that reference stored files ...

Adds indexes on task_attachments.file_id, users.avatar_file_id,
users.export_file_id, projects.background_file_id and
migration_status.upload_file_id.

2026-11-05 15:42:45 +01:00

..

bot_identity_test.go

refactor(bots): take a verified user, not any web.Auth

2026-08-29 23:29:46 +02:00

bot_identity.go

refactor(bots): take a verified user, not any web.Auth

2026-08-29 23:29:46 +02:00

caldav_token_test.go

test(user): enforce CalDAV token deletion ownership

2026-09-30 23:26:55 +02:00

caldav_token.go

fix(caldav-tokens): honour page in the v2 token list

2026-10-01 17:29:11 +02:00

db.go

feat(auth): persist linked OIDC identities and authenticate local accounts

2026-11-05 12:44:49 +01:00

delete.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

error_test.go

feat: always enable bot users

2026-05-04 10:38:53 +00:00

error.go

fix(user): throttle password re-checks per user on sensitive account actions

2026-10-20 15:13:02 +02:00

events.go

feat(user): lock account after 10 failed password attempts

2026-11-03 10:41:13 +01:00

is_admin_test.go

feat(user): extract last-admin guard and close invariant gaps

2026-04-20 18:55:06 +00:00

lockout.go

fix(user): reset failed attempt counter after account lockout

2026-11-03 10:41:13 +01:00

main_test.go

feat: move to slog for logging

2025-07-21 18:15:39 +02:00

notifications_test.go

feat(user): notify users when an OIDC identity is linked

2026-11-05 12:44:50 +01:00

notifications.go

feat(user): notify users when an OIDC identity is linked

2026-11-05 12:44:50 +01:00

reauth_test.go

refactor(user): share password and TOTP reauthentication

2026-11-05 12:44:49 +01:00

reauth.go

refactor(user): share password and TOTP reauthentication

2026-11-05 12:44:49 +01:00

session_auth_cache_test.go

fix(auth): reject user JWTs whose session was revoked on the HTTP path

2026-10-20 15:13:02 +02:00

session_auth_cache.go

fix(auth): reject user JWTs whose session was revoked on the HTTP path

2026-10-20 15:13:02 +02:00

test.go

feat(auth): persist linked OIDC identities and authenticate local accounts

2026-11-05 12:44:49 +01:00

token_test.go

test(user): reject tokens issued for another purpose

2026-09-30 23:26:55 +02:00

token.go

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

totp_test.go

fix(user): build the TOTP replay key from the normalized passcode

2026-11-05 15:42:45 +01:00

totp.go

fix(user): build the TOTP replay key from the normalized passcode

2026-11-05 15:42:45 +01:00

update_email_test.go

fix(user): verify the authenticated account's password on email change

2026-11-03 22:03:18 +01:00

update_email.go

refactor(user): share password and TOTP reauthentication

2026-11-05 12:44:49 +01:00

user_claims_test.go

fix(security): reject non-user tokens in GetUserFromClaims

2026-08-04 13:40:11 +02:00

user_create_test.go

feat(invites): add admin-managed user invite links

2026-09-12 18:21:35 +02:00

user_create.go

fix(user): only take username, name and language when creating a bot

2026-11-05 15:42:45 +01:00

user_email_confirm_test.go

fix(user): bind email confirmation to the token and pending address it was issued for

2026-11-03 20:15:14 +01:00

user_email_confirm.go

fix(user): bind email confirmation to the token and pending address it was issued for

2026-11-03 20:15:14 +01:00

user_identity_test.go

feat(auth): persist linked OIDC identities and authenticate local accounts

2026-11-05 12:44:49 +01:00

user_identity.go

feat(user): notify users when an OIDC identity is linked

2026-11-05 12:44:50 +01:00

user_password_reset.go

fix(user): handle status errors in pkg/user callers, remove redundant checks

2026-03-23 12:06:16 +00:00

user_test.go

fix(user): only take username, name and language when creating a bot

2026-11-05 15:42:45 +01:00

user.go

feat(migration): index the columns that reference stored files

2026-11-05 15:42:45 +01:00

users_project.go

fix(user): match exact username search literally on PostgreSQL

2026-11-03 20:15:14 +01:00

validator_test.go

fix(bots): 404 unowned bots, require status on PUT, audit owner status changes

2026-10-01 15:27:34 +02:00

validator.go

fix(bots): 404 unowned bots, require status on PUT, audit owner status changes

2026-10-01 15:27:34 +02:00