boban 217189598b fix(security): constant-time password-reset (flatten account-enumeration timing) ... Queues the reset-link notification so sendResetLink returns in constant time regardless of account existence; resetPassword does equivalent dummy verify work for unknown/no-2FA users. Closes the timing side-channels flagged on the forgot-password review. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-15 19:16:30 +02:00
..
Console/Commands	feat(audit): configurable retention + scheduled clusev:prune-audit	2026-06-14 23:40:17 +02:00
Events	fix(blade): garbled header on every signed-in page + private metrics channel (v0.4.1)	2026-06-14 08:34:07 +02:00
Http	feat(tls): external reverse-proxy mode core — no ACME + no forced HTTPS redirect (host check kept)	2026-06-14 22:31:04 +02:00
Jobs	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00
Livewire	fix(security): constant-time password-reset (flatten account-enumeration timing)	2026-06-15 19:16:30 +02:00
Models	fix(security): constant-time password-reset (flatten account-enumeration timing)	2026-06-15 19:16:30 +02:00
Notifications	fix(security): constant-time password-reset (flatten account-enumeration timing)	2026-06-15 19:16:30 +02:00
Providers	feat(mail): SMTP configuration in Settings (encrypted password, runtime override, test-send)	2026-06-14 23:42:19 +02:00
Services	feat(system): auto-restart sentinel — one-click restart via host watcher (no docker socket)	2026-06-14 23:42:50 +02:00
Support	feat(security): signed confirm-action tokens + airtight backup-code reveal	2026-06-15 18:35:33 +02:00