aboutsummaryrefslogtreecommitdiffstats
path: root/routes/users.ts
Commit message (Expand)AuthorAgeFilesLines
* users: let a password unlock the encrypted nostr key for any sessionHEADmasterAdam Soltys30 hours1-0/+33
* login: drop the unused per-username failure counterAdam Soltys38 hours1-7/+0
* users: keep the encrypted nostr key and 2FA seed away from bearer tokensAdam Soltys6 days1-3/+14
* me: stop reporting archived balance as locked for frozen accountsAdam Soltys6 days1-16/+1
* Evicted accounts can't receive or log in; limit errors say what's happeningAdam Soltys10 days1-0/+5
* users: reserve service names on registration and renameAdam Soltys2026-09-211-2/+2
* security: drop the admin endpoint surface and land pending hardeningAdam Soltys2026-09-131-59/+57
* flash: build each config image in its own temp dirAdam Soltys2026-09-041-6/+16
* flash: create printer dir and return errors instead of unhandled 500Adam Soltys2026-09-041-7/+13
* login: fail-open recaptcha verify on infrastructure errorsAdam Soltys2026-08-251-2/+17
* nwc: 404 missing connections + require key rotation to revive retired onesAdam Soltys2026-08-221-2/+31
* nwc: enforce per-connection spend budgets + flag-gated incident containmentAdam Soltys2026-08-221-2/+30
* users: sum sub-account balances in the deleteSelf guard (S12)Adam Soltys2026-08-071-4/+13
* logging: redact auth headers; set cookie flags on session token (S5)Adam Soltys2026-08-071-2/+14
* auth: fail closed on adminpass, scrub sample secrets (S3)Adam Soltys2026-08-071-2/+7
* auth: hash passwords at bcrypt cost 12 with transparent upgrade (S2)Adam Soltys2026-08-071-2/+17
* sockets: verify JWT signatures on the websocket auth path (S1)Adam Soltys2026-08-071-4/+4
* Let a migrated account hand its address to coinos v3Adam Soltys2026-08-031-0/+1
* users: return generic 404 from /reset for non-adminsAdam Soltys2026-06-271-1/+10
* users: add authenticated self-delete endpointAdam Soltys2026-06-131-0/+103
* nwc: keep notifications opt-in (revert default-on)Adam Soltys2026-06-061-6/+5
* nwc: fix pay_invoice reply reliability, rate-limit drops, notificationsAdam Soltys2026-06-061-1/+6
* listener logsAdam Soltys2026-03-181-2/+1
* remove logsAdam Soltys2026-03-171-10/+0
* pass bytes for app secretAdam Soltys2026-03-141-1/+2
* fix pending payment cleanup and login password verificationAdam Soltys2026-03-061-5/+7
* fix login/reset glitchesAdam Soltys2026-03-031-7/+18
* check forwarded host headerAdam Soltys2026-02-061-1/+1
* health checkAdam Soltys2026-02-061-45/+6
* whitelist ua'sAdam Soltys2026-02-041-0/+11
* strip email from usernameAdam Soltys2026-02-021-0/+1
* check usernameAdam Soltys2026-01-291-11/+1
* skip captcha for torAdam Soltys2026-01-271-0/+4
* case insensitive usernamesAdam Soltys2026-01-261-1/+4
* captcha bypass whitelistAdam Soltys2026-01-261-10/+13
* read payments from archiveAdam Soltys2026-01-221-6/+6
* fix admin resetsAdam Soltys2026-01-221-7/+3
* api key captcha bypassAdam Soltys2026-01-221-3/+11
* captcha thresholdsAdam Soltys2026-01-211-11/+18
* require auth for accountsAdam Soltys2026-01-211-0/+5
* recaptcha on loginAdam Soltys2026-01-211-2/+32
* loggingAdam Soltys2026-01-211-1/+3
* check usernameAdam Soltys2026-01-191-0/+1
* check app ownershipAdam Soltys2025-11-171-2/+5
* check usernameAdam Soltys2025-11-171-2/+5
* require challenge after login failuresAdam Soltys2025-10-101-7/+9
* fail fasterAdam Soltys2025-10-011-1/+1
* challenge verifyAdam Soltys2025-10-011-12/+4
* login challengeAdam Soltys2025-10-011-0/+11
* fix username change logicAdam Soltys2025-09-301-9/+9
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-15 04:59:41 +0000