Add admin password change flow (closes #65) #83

Merged
sneak merged 4 commits from issue-65-password-change into main 2026-08-07 23:23:05 +02:00

4 Commits

Author SHA1 Message Date
b0c472f06b Merge branch 'main' into issue-65-password-change
All checks were successful
check / check (push) Successful in 2m44s
2026-08-07 23:21:15 +02:00
95105cbfc8 Merge branch 'main' into issue-65-password-change
All checks were successful
check / check (push) Successful in 2m45s
2026-08-07 23:18:16 +02:00
8362ce9ee0 Rate-limit the password change endpoint (#65)
All checks were successful
check / check (push) Successful in 2m40s
The password change POST verifies the current password, making it
a password-based authentication endpoint that REPO_POLICIES.md
requires rate limiting on. Extract the login limiter's POST-only
per-IP pattern into a shared postRateLimit helper and apply the
same 5-per-minute limit to POST /user/{username}/password.
2026-08-07 16:29:43 +00:00
3084ed545b Add admin password change flow (closes #65)
All checks were successful
check / check (push) Successful in 5s
2026-08-07 22:54:44 +07:00