| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Add rate limiting on login and password reset endpoints | Thomas Vanbesien | 2026-03-22 | 1 | -0/+32 |
| | | | | | | | Track attempts per IP in a rate_limits table with a sliding time window. Login allows 5 failed attempts per 15 min, password reset allows 3 requests per 15 min. Old entries are purged automatically. | ||||
| * | Add profile page for editing username, email, password, and notifications | Thomas Vanbesien | 2026-03-21 | 1 | -8/+0 |
| | | |||||
| * | Add user authentication with email verification and password reset | Thomas Vanbesien | 2026-03-21 | 1 | -0/+229 |
| Implements registration, login/logout, email verification via token, and password reset flow. Includes CSRF protection, flash messages, MailPit for dev email testing, and security docs in README. | |||||
