Add admin password change flow (closes #65) #83

Merged
sneak merged 4 commits from issue-65-password-change into main 2026-08-07 23:23:05 +02:00
4 Commits
Author SHA1 Message Date
sneak b0c472f06b Merge branch 'main' into issue-65-password-change
check / check (push) Successful in 2m44s
2026-08-07 23:21:15 +02:00
sneak 95105cbfc8 Merge branch 'main' into issue-65-password-change
check / check (push) Successful in 2m45s
2026-08-07 23:18:16 +02:00
sneak 8362ce9ee0 Rate-limit the password change endpoint (#65)
check / check (push) Successful in 2m40s
The password change POST verifies the current password, making it
a password-based authentication endpoint that REPO_POLICIES.md
requires rate limiting on. Extract the login limiter's POST-only
per-IP pattern into a shared postRateLimit helper and apply the
same 5-per-minute limit to POST /user/{username}/password.
2026-08-07 16:29:43 +00:00
sneak 3084ed545b Add admin password change flow (closes #65)
check / check (push) Successful in 5s
2026-08-07 22:54:44 +07:00