kolaente 3a0ea15d8c fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

..

caldav_token.go

fix(caldav): eliminate nested db session in CalDAV auth

2026-03-03 10:41:19 +01:00

db.go

feat: register Vikunja tables with db package at init

2026-03-04 15:37:54 +01:00

delete.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

error_test.go

feat: always enable bot users

2026-05-04 10:38:53 +00:00

error.go

fix: interpolate dynamic values into translated error toasts

2026-07-18 13:41:15 +00:00

events.go

feat(events): add auth boundary events

2026-06-12 08:56:08 +00:00

is_admin_test.go

feat(user): extract last-admin guard and close invariant gaps

2026-04-20 18:55:06 +00:00

main_test.go

feat: move to slog for logging

2025-07-21 18:15:39 +02:00

notifications.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

test.go

test: add TOTP fixture and load it in user test bootstrap

2026-03-23 10:34:49 +00:00

token_test.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

token.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

totp_test.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

totp.go

feat(api/v2): add totp qr code endpoint

2026-06-17 18:39:38 +00:00

update_email_test.go

fix(user): persist status on email updates (#1084)

2025-08-04 14:07:00 +00:00

update_email.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

user_claims_test.go

feat(user): extract last-admin guard and close invariant gaps

2026-04-20 18:55:06 +00:00

user_create.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

user_email_confirm_test.go

fix: correct license header references (#882)

2025-06-10 12:18:38 +02:00

user_email_confirm.go

fix(user): handle status errors in pkg/user callers, remove redundant checks

2026-03-23 12:06:16 +00:00

user_password_reset.go

fix(user): handle status errors in pkg/user callers, remove redundant checks

2026-03-23 12:06:16 +00:00

user_test.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

user.go

fix(user): stop double-encoding FrontendSettings on UpdateUser (#2793)

2026-07-19 12:13:35 +02:00

users_project.go

refactor(user): share user-search logic between v1 and v2

2026-06-11 20:07:43 +00:00

validator.go

feat(api): enforce password validation on reset and update flows

2026-02-25 13:44:56 +01:00