fsylvain cbb403011a fix: login and password reset requests are rate-limited per client (not in the README; there is currently no brute-force protection on the public auth routes)

2026-09-25 05:33:02 +02:00

..

assets

refac: rethought the complete workflow and deployement flow ; docs etc.

2026-09-23 17:36:36 +02:00

config

fix: login and password reset requests are rate-limited per client (not in the README; there is currently no brute-force protection on the public auth routes)

2026-09-25 05:33:02 +02:00

hashing

refac: password and code hashing & checking go through a domain hasher interface used by the use cases instead of bcrypt in the user repository and the auth handler

2026-09-23 19:29:20 +02:00

mailer

refac: runtime settings are read once at startup and passed in through the composition root; no handler, router or repository reads environment variables

2026-09-24 01:30:00 +02:00

persistence

fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused

2026-09-25 05:03:34 +02:00

useCases

refac: reamaining auth surface rewrite, T0

2026-09-24 05:11:49 +02:00