boban
/
clusev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
294 Commits
1 Branch
91 Tags
9.3 MiB
Commit Graph

3 Commits (2d12978616f3d16896c2492f3e5d6714827b76e7)

Author SHA1 Message Date
boban 8d2b7087a9 feat: short clusev commands in versions panel, lang strings, MOTD 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-19 23:18:25 +02:00
boban 217189598b fix(security): constant-time password-reset (flatten account-enumeration timing) 
Queues the reset-link notification so sendResetLink returns in constant time regardless
of account existence; resetPassword does equivalent dummy verify work for unknown/no-2FA
users. Closes the timing side-channels flagged on the forgot-password review.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-15 19:16:30 +02:00
boban d44f6930bb feat(auth): SMTP-aware forgot-password — 15-min e-mail link + 2FA fallback; recovery note out of the public screen 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-15 18:53:37 +02:00