2 Commits (abaed12b0bfd2ef2d8e0fdaeb7f89154819100e1)

Author	SHA1	Message	Date
boban	abaed12b0b	feat(auth): email reset-link path (gated on a configured mailer) ... ForgotPassword gains sendResetLink() + a ResetPassword component at /reset-password/{token} using Laravel's password broker. The email option is shown only when mail.default is a real mailer (hidden while MAIL_MAILER=log), so it activates automatically once SMTP is configured. Tested with Notification::fake. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 16:57:05 +02:00
boban	cb8b906aa8	feat(auth): forgot-password reset via 2FA or backup code ... "Passwort vergessen?" on login -> a reset view that proves identity with a TOTP or one-time backup code (no email needed), then sets a new password under the min(12) mixedCase numbers policy. Rate-limited, generic messages (no account enumeration), audited. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 16:55:01 +02:00