nimuli/app
boban ee0824302a fix(auth): remove dummy login route, validate locale allowlist
- Remove no-op POST /login route that caused named-route collision and
  was testing throttle:5,1 middleware against a null handler.
- Rewrite LoginRateLimitTest to drive the real Volt login component via
  Volt::test(), verifying the RateLimiter blocks the 6th attempt with
  auth.throttle message; throttle is Laravel core, test confirms wiring.
- Add supported_locales allowlist to config/app.php ['de', 'en'].
- LocaleFromUser middleware now validates user locale against allowlist
  and falls back to app.locale for unknown/unsupported values.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-16 00:38:32 +02:00
..
Domains fix(models): null-guard isExpired, remove FK from guarded, add return types and casts 2026-05-16 00:27:15 +02:00
Http fix(auth): remove dummy login route, validate locale allowlist 2026-05-16 00:38:32 +02:00
Livewire feat: initial Nimuli scaffold with Laravel 12, Livewire 3, Octane, Reverb, Docker 2026-05-15 23:51:57 +02:00
Models fix(models): null-guard isExpired, remove FK from guarded, add return types and casts 2026-05-16 00:27:15 +02:00
Providers feat: initial Nimuli scaffold with Laravel 12, Livewire 3, Octane, Reverb, Docker 2026-05-15 23:51:57 +02:00
View/Components feat: initial Nimuli scaffold with Laravel 12, Livewire 3, Octane, Reverb, Docker 2026-05-15 23:51:57 +02:00