fsylvain cbb403011a fix: login and password reset requests are rate-limited per client (not in the README; there is currently no brute-force protection on the public auth routes)

2026-09-25 05:33:02 +02:00

..

domain

fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused

2026-09-25 05:03:34 +02:00

infrastructure

fix: login and password reset requests are rate-limited per client (not in the README; there is currently no brute-force protection on the public auth routes)

2026-09-25 05:33:02 +02:00