nexxo a5db914696 Key the password-confirmation marker by guard and identity ... confirmPassword() already checked the right account per guard, but the session marker it stamped, auth.password_confirmed_at, was one flat key shared by every guard. In shared-host mode the portal and console guards keep their login in the same session, so confirming a customer's portal password left the marker in place for an operator-only gate too. One private method now computes the key for all three callers so they cannot drift apart again.		2026-07-28 15:00:46 +02:00
..
Admin	Give operators somewhere to actually set up two-factor	2026-07-28 14:21:02 +02:00
Auth	Give the console a front door of its own	2026-07-28 11:45:22 +02:00
Concerns	Key the password-confirmation marker by guard and identity	2026-07-28 15:00:46 +02:00
Backups.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
Billing.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
Cloud.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
ConfirmCancelPackage.php	fix(portal): no silent no-ops without a customer; maintenance visible per instance; maintenance form redesign	2026-07-25 19:10:44 +02:00
ConfirmCloseAccount.php	fix(portal): no silent no-ops without a customer; maintenance visible per instance; maintenance form redesign	2026-07-25 19:10:44 +02:00
ConfirmRemoveOrder.php	feat(billing): a cart you can actually read and change	2026-07-26 05:26:49 +02:00
CustomerProvisioning.php	fix(engine-b): stop customer dashboard polling once provisioning failed	2026-07-25 13:06:31 +02:00
Dashboard.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
EditMailbox.php	Confirm a console password against the console's own record	2026-07-28 11:17:34 +02:00
EditSeat.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
Invoices.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
NewSupportRequest.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
Settings.php	Give customers two-factor, and stop every button on the settings page reacting at once	2026-07-27 08:48:34 +02:00
Support.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
Users.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00