aboutsummaryrefslogtreecommitdiffstats
path: root/src/app/Controllers/AuthController.php
Commit message (Collapse)AuthorAgeFilesLines
* Add rate limiting on login and password reset endpointsThomas Vanbesien2026-03-221-0/+32
| | | | | | Track attempts per IP in a rate_limits table with a sliding time window. Login allows 5 failed attempts per 15 min, password reset allows 3 requests per 15 min. Old entries are purged automatically.
* Add profile page for editing username, email, password, and notificationsThomas Vanbesien2026-03-211-8/+0
|
* Add user authentication with email verification and password resetThomas Vanbesien2026-03-211-0/+229
Implements registration, login/logout, email verification via token, and password reset flow. Includes CSRF protection, flash messages, MailPit for dev email testing, and security docs in README.