nexxo a5db914696 Key the password-confirmation marker by guard and identity ... confirmPassword() already checked the right account per guard, but the session marker it stamped, auth.password_confirmed_at, was one flat key shared by every guard. In shared-host mode the portal and console guards keep their login in the same session, so confirming a customer's portal password left the marker in place for an operator-only gate too. One private method now computes the key for all three callers so they cannot drift apart again.		2026-07-28 15:00:46 +02:00
..
AdminConsoleTest.php	Send a guest bounced off the console to the console's own sign-in	2026-07-28 13:32:05 +02:00
AdminHostRestrictionTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
AdminSettingsTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
BroadcastAuthTest.php	Authorize the console's live feed on the operator guard, not the default	2026-07-28 13:31:50 +02:00
ConsoleHostSeparationTest.php	Authorize the console's live feed on the operator guard, not the default	2026-07-28 13:31:50 +02:00
ConsoleNetworkTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
ConsoleReportsRealDataTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
CustomerRevenueTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
DatacenterTest.php	Send a guest bounced off the console to the console's own sign-in	2026-07-28 13:32:05 +02:00
HostManagementTest.php	Send a guest bounced off the console to the console's own sign-in	2026-07-28 13:32:05 +02:00
InstanceAdminAccessTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
MaintenanceTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
OperatorLogoutTest.php	Stop the console logout from destroying a shared portal session	2026-07-28 13:58:42 +02:00
OperatorModelTest.php	Give the people who run CluPilot a table of their own	2026-07-28 09:20:54 +02:00
OperatorTwoFactorEnrollmentTest.php	Give operators somewhere to actually set up two-factor	2026-07-28 14:21:02 +02:00
OperatorTwoFactorPolicyTest.php	Give operators somewhere to actually set up two-factor	2026-07-28 14:21:02 +02:00
PasswordConfirmationGuardTest.php	Key the password-confirmation marker by guard and identity	2026-07-28 15:00:46 +02:00
PlanAdminTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
ProvisioningActionsTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
RbacMoveTest.php	Carry operators into the RBAC move via direct permissions too, not only roles	2026-07-28 14:20:49 +02:00
RbacTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
SecretCipherTest.php	Make isUsable() apply the same 32-byte rule encrypter() does	2026-07-28 05:09:09 +02:00
SecretVaultTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
SecretsPageTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
UpdateButtonTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
VpnTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00