boban 01867dba09 harden(auth): capture login IP once, assert 2fa-failed audit		2026-06-20 18:06:11 +02:00
..
Console/Commands	feat(install): fixed default admin e-mail admin@clusev.local	2026-06-19 16:54:03 +02:00
Events	fix(blade): garbled header on every signed-in page + private metrics channel (v0.4.1)	2026-06-14 08:34:07 +02:00
Http	feat(auth): guests-only BlockBannedIp middleware + 403 page	2026-06-20 17:45:16 +02:00
Jobs	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00
Livewire	harden(auth): capture login IP once, assert 2fa-failed audit	2026-06-20 18:06:11 +02:00
Models	feat(auth): BannedIp model + migration	2026-06-20 17:26:28 +02:00
Notifications	fix(security): constant-time password-reset (flatten account-enumeration timing)	2026-06-15 19:16:30 +02:00
Providers	fix(assets): drop Vite preload hints (silence 'preloaded but not used')	2026-06-19 21:50:54 +02:00
Rules	feat(auth): ValidIpOrCidr validation rule	2026-06-20 17:42:06 +02:00
Services	harden(auth): BruteforceGuard review fixes (hit count, mask bounds, once-guard, mapped loopback)	2026-06-20 17:39:01 +02:00
Support	fix(security): harden brute-force, rate-limiting and auth-DoS (audit follow-up)	2026-06-17 17:59:45 +02:00