DAK Zweitmeinungs-Portal – Case Management & Reporting
Find a file
CCS Admin d5db84d93f feat: add self-service password reset via email
Adds "Passwort vergessen?" to login page with email-based password
reset flow. Backend generates secure token (SHA-256 hashed, 1h expiry),
sends reset link via SMTP, and validates on submission. Includes rate
limiting (3 requests/hour/email), audit logging, and account unlock
on successful reset. New ResetPasswordPage with password confirmation.

New DB table: password_reset_tokens (migration 008).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-28 14:56:07 +00:00
backend feat: add self-service password reset via email 2026-02-28 14:56:07 +00:00
deploy feat: add Passenger app.js for Plesk deployment 2026-02-24 08:55:47 +00:00
docs feat: add self-service password reset via email 2026-02-28 14:56:07 +00:00
frontend feat: add self-service password reset via email 2026-02-28 14:56:07 +00:00
.gitignore feat: add avatar upload/delete endpoints with static file serving 2026-02-26 09:39:21 +00:00
Dak_projekt_spezifikation_final.md feat: project scaffolding with FastAPI, config, database connection 2026-02-24 07:24:00 +00:00