kolaente f33cde82e2 feat(audit): attribute failed logins to the originating request ...

Thread the request context through CheckUserCredentials so the
LoginFailedEvent carries IP, user agent and request id — without it,
failed logins were the one auth event useless for brute-force tracing.
All four callers have the request at hand.

2026-06-12 08:56:08 +00:00

..

caldav_token.go

…

db.go

…

delete.go

…

error_test.go

feat: always enable bot users

2026-05-04 10:38:53 +00:00

error.go

feat: always enable bot users

2026-05-04 10:38:53 +00:00

events.go

feat(events): add auth boundary events

2026-06-12 08:56:08 +00:00

is_admin_test.go

feat(user): extract last-admin guard and close invariant gaps

2026-04-20 18:55:06 +00:00

main_test.go

…

notifications.go

…

test.go

…

token.go

docs(api/v2): tag CalDAV token fields for the v2 schema

2026-06-10 17:55:52 +00:00

totp_test.go

test(user): cover TOTP lockout persistence and password-reset unlock

2026-04-09 16:08:26 +00:00

totp.go

docs(api/v2): tag TOTP fields for the v2 schema

2026-06-10 17:58:16 +00:00

update_email_test.go

…

update_email.go

feat(audit): attribute failed logins to the originating request

2026-06-12 08:56:08 +00:00

user_claims_test.go

feat(user): extract last-admin guard and close invariant gaps

2026-04-20 18:55:06 +00:00

user_create.go

feat(user): add CreateBotUser

2026-05-01 14:44:10 +00:00

user_email_confirm_test.go

…

user_email_confirm.go

fix(user): handle status errors in pkg/user callers, remove redundant checks

2026-03-23 12:06:16 +00:00

user_password_reset.go

fix(user): handle status errors in pkg/user callers, remove redundant checks

2026-03-23 12:06:16 +00:00

user_test.go

feat(audit): attribute failed logins to the originating request

2026-06-12 08:56:08 +00:00

user.go

feat(audit): attribute failed logins to the originating request

2026-06-12 08:56:08 +00:00

users_project.go

refactor(user): share user-search logic between v1 and v2

2026-06-11 20:07:43 +00:00

validator.go

…