boban 217189598b fix(security): constant-time password-reset (flatten account-enumeration timing) ... Queues the reset-link notification so sendResetLink returns in constant time regardless of account existence; resetPassword does equivalent dummy verify work for unknown/no-2FA users. Closes the timing side-channels flagged on the forgot-password review. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-15 19:16:30 +02:00
..
.gitkeep	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00
ForgotPassword.php	fix(security): constant-time password-reset (flatten account-enumeration timing)	2026-06-15 19:16:30 +02:00
Login.php	feat(i18n): bilingual foundation (DE/EN) + localize auth/dashboard/servers/fleet/account	2026-06-13 22:36:16 +02:00
PasswordChange.php	feat(2fa): onboarding no longer forces 2FA (only password rotation)	2026-06-14 20:44:12 +02:00
ResetPassword.php	fix(auth): toaster on auth pages + audit email-link resets	2026-06-14 17:07:52 +02:00
TwoFactorChallenge.php	fix(2fa): TwoFactorSetup back to auth layout; exception-safe User::verifyTotp at all call sites	2026-06-14 21:40:15 +02:00
TwoFactorSetup.php	fix(2fa): bound the backup-code reveal flag with a 10-minute TTL	2026-06-15 18:42:58 +02:00